)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:42 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0xe000000]}})

[ 3080.853610][T16370] kvm [16366]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3080.992457][T16385] kvm [16366]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:42 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x10000000]}})

11:18:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1]})

11:18:42 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:42 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3081.322475][T16403] kvm [16399]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:42 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x700000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:42 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x11000000]}})

11:18:42 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="0fc7b13e000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x50}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x9}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:42 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2]})

[ 3081.804180][T16431] kvm [16429]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x12000000]}})

11:18:43 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:43 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:18:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce]})

11:18:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x25000000]}})

11:18:43 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3082.215237][T16461] kvm [16458]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3082.549191][   T26] audit: type=1800 audit(1572088723.739:251): pid=16446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17126 res=0
11:18:43 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x800000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x10004, 0x1, 0x2000, 0x2000, &(0x7f000000f000/0x2000)=nil})
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000200)={0xf458, 0x1, 0x40, 0x80, 0x1}, 0xc)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f00000001c0)={0x46, &(0x7f0000000140)=""/70})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x40000000]}})

11:18:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1]})

11:18:43 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x5c000000]}})

[ 3082.708762][T16486] kvm [16484]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:18:44 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3082.966936][T16512] kvm [16506]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:44 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:18:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:18:44 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x2]}})

[ 3083.428957][   T26] audit: type=1800 audit(1572088724.619:252): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17127 res=0
11:18:44 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x900000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='\xa6\xee\xe2 \x00\x00}J\x00', 0x40, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0x1f9, &(0x7f00000003c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r4}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0xc)

11:18:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

11:18:44 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x3]}})

11:18:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x4]}})

[ 3083.549220][T16541] kvm [16537]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:44 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='\t\x00\x00\x00\x00\x00\x00\xdd\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:45 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:18:45 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5]}})

11:18:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

11:18:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3083.993519][   T26] audit: type=1800 audit(1572088725.179:253): pid=16551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17139 res=0
[ 3084.127310][T16578] kvm [16570]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:45 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xa00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
nanosleep(&(0x7f0000000140), 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:45 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x6]}})

11:18:45 executing program 2:
socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:45 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x7]}})

11:18:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

11:18:45 executing program 2:
socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:45 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x8]}})

[ 3084.442052][T16606] kvm [16605]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3084.798570][   T26] audit: type=1800 audit(1572088725.989:254): pid=16599 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17143 res=0
11:18:46 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:46 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0xa4640, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8000, 0x40020)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000180)=0x800)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

11:18:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

11:18:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x9]}})

11:18:46 executing program 2:
socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:46 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xb00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xa]}})

[ 3085.043255][T16636] kvm [16631]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:46 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x9, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xb]}})

11:18:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

11:18:46 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3085.380484][T16661] kvm [16659]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3085.669794][   T26] audit: type=1800 audit(1572088726.859:255): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17143 res=0
11:18:47 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:47 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xc]}})

11:18:47 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

11:18:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='\x85\xa7\xd0bA\xe6\x8b8p0\x00', 0x0, 0x0, 0x4f5498e6d959877b, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:47 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xc00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:47 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:47 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd]}})

[ 3086.000251][T16689] kvm [16682]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]})

11:18:47 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe]}})

11:18:47 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:47 executing program 4:
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x8, {0x7, 0x1f, 0x3f, 0x22402, 0x1, 0xf3, 0x400, 0x80}}, 0x50)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x4, 0x1)
ioctl$PPPIOCDISCONN(r0, 0x7439)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x7]}, &(0x7f0000000200)=0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3086.669570][   T26] audit: type=1800 audit(1572088727.859:256): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17165 res=0
11:18:48 executing program 3:
r0 = open(0x0, 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:48 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x10]}})

11:18:48 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})

11:18:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x18)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:18:48 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xd00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:48 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x11]}})

[ 3087.070586][T16744] kvm [16733]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:48 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]})

11:18:48 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x12]}})

11:18:48 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4cf, 0x0, 0x0, 0x3]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3087.374553][T16766] kvm [16764]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3087.740292][   T26] audit: type=1800 audit(1572088728.929:257): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17441 res=0
[ 3087.767524][   T26] audit: type=1800 audit(1572088728.949:258): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17233 res=0
11:18:49 executing program 3:
r0 = open(0x0, 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:49 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x25]}})

11:18:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]})

11:18:49 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {}, {0x2202}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x4, 0xa6ae, 0x10000, 0x5, 0x0, [{0x2, 0x4, 0x0, [], 0x81}, {0x2, 0x4, 0x1, [], 0x9}, {0x7, 0x1, 0x1f, [], 0x7f}, {0x1f, 0x94}, {0x70, 0x8, 0x81, [], 0xb6}, {0x6, 0x6, 0x0, [], 0x1}, {0x5, 0x7, 0x78, [], 0x8}, {0x6, 0x20, 0x7f, [], 0x1f}, {0x1f, 0x9, 0x7f}, {0x2, 0x1, 0x3}, {0x8, 0x80, 0x4, [], 0x8}, {0x3c, 0x3f, 0xff, [], 0x80}, {0x6, 0x9, 0xfe, [], 0x7}, {0x4, 0x7f, 0x3, [], 0x80}, {0x7f, 0x80, 0x80, [], 0x3f}, {0x7f, 0x7, 0xff, [], 0x81}, {0x5, 0x3, 0x7, [], 0x8d}, {0x9, 0x0, 0x0, [], 0x5}, {0x2, 0x20, 0xab, [], 0x12}, {0x3, 0xff, 0x0, [], 0xc4}, {0x1, 0x1, 0x7, [], 0xfc}, {0x0, 0x6, 0x1, [], 0x43}, {0x8, 0x1, 0x9, [], 0x80}, {0x41, 0x5, 0x1, [], 0x1}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:49 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xe00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:49 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c]}})

11:18:49 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3087.997926][T16797] kvm [16790]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:49 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x300]}})

11:18:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]})

11:18:49 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$KDMKTONE(r3, 0x4b30, 0x4)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3088.366859][T16826] kvm [16822]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3088.661772][   T26] audit: type=1800 audit(1572088729.849:259): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17146 res=0
11:18:50 executing program 3:
r0 = open(0x0, 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:50 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x500]}})

11:18:50 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]})

11:18:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x10c400, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20)
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={r7, 0x4, 0x9f32, 0x20fc, 0x3ff, 0xf9e, 0x0, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x200, @rand_addr="210bbe847b0d98b52b92194412848071", 0x8}}, 0x285b4eba, 0x0, 0x74, 0x9, 0x8}}, &(0x7f0000000280)=0xb0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:50 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x1000000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:50 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x600]}})

[ 3088.985382][T16850] kvm [16841]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:50 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:50 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x700]}})

11:18:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})

11:18:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x2040400)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)
ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
setregid(0x0, r3)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setregid(0x0, r5)
getgroups(0x4, &(0x7f00000001c0)=[r2, 0xee01, r3, r5])
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x1fd, 0x1, 0x10000, 0x2000, &(0x7f0000016000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:18:50 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3089.332106][T16877] kvm [16874]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3089.423407][T16882] bond0: (slave bond_slave_1): Releasing backup interface
[ 3089.689823][   T26] audit: type=1800 audit(1572088730.879:260): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17758 res=0
11:18:51 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:51 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x900]}})

11:18:51 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]})

11:18:51 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3090.033927][T16905] kvm [16893]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:51 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xa00]}})

11:18:51 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:51 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x1100000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3090.253131][T16911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3090.290611][T16905] kvm [16893]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:51 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x0, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]})

11:18:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:51 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xb00]}})

[ 3090.511467][T16930] kvm [16926]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3090.878851][   T26] audit: type=1800 audit(1572088732.069:261): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16578 res=0
11:18:52 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xc00]}})

11:18:52 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x0, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:52 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]})

11:18:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:52 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x1200000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:52 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd00]}})

[ 3091.034756][T16958] kvm [16954]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:52 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x0, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:52 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe00]}})

11:18:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]})

11:18:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x40, 0x8, 0x2, 0x4563, 0x4, 0x80000000, 0x3, 0x1, 0xd98, 0x8a8e, 0x3, 0x81, 0x101, 0x95, 0xde], 0x10000, 0x60200})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}], 0xfffffffe})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:52 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1100]}})

11:18:52 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:52 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1200]}})

[ 3091.806023][   T26] audit: type=1800 audit(1572088732.989:262): pid=16982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17768 res=0
11:18:53 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]})

11:18:53 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:53 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x2500]}})

11:18:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000, 0x0, 0x3, 0x0, 0x0, 0x4, 0x4cb, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:53 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x2500000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:53 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x4000]}})

11:18:53 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]})

11:18:53 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c00]}})

[ 3092.282745][T17050] kvm_set_msr_common: 2 callbacks suppressed
[ 3092.282755][T17050] kvm [17049]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
shmget(0x1, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
pread64(r1, &(0x7f0000000240)=""/69, 0x45, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x108001, 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', r4)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xfffffffeffffffff)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000340)={<r6=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000440)={r6, 0x16})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/249, 0xf9, 0xffffffffffffffff}}, 0x10)

11:18:53 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3092.723704][   T26] audit: type=1800 audit(1572088733.909:263): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17195 res=0
11:18:54 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(0xffffffffffffffff)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1000000]}})

11:18:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]})

11:18:54 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x104, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff43}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe215}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xd2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d5a}]}, 0x104}, 0x1, 0x0, 0x0, 0x9a8}, 0x8004042)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000140)=""/108)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffb)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)='trusted.overlay.upper\x00', &(0x7f00000005c0)={0x0, 0xfb, 0x65, 0x5, 0x9, "d56ec8a4cfe77dca84632159f2aa7f14", "f65dce0559c3e6096685778734a67f48495520fe580a47934aaf17fc1d37671fa4acf71f5fc3601059fa960d2222a382064ba753cff1c30afb78c30577bcd4dd4c9749e123d5b129686c6b3a48931eca"}, 0x65, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:18:54 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x4000000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x2000000]}})

11:18:54 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3092.994209][T17086] kvm [17083]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:54 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(0xffffffffffffffff)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]})

11:18:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x3000000]}})

11:18:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x9c, @local, 0x8}], 0x88)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5a68, @loopback, 0x6}], 0x1c)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$RTC_VL_CLR(r4, 0x7014)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0xfffe, 0x85, 0xff}, {0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x4, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8000000000000000}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000440)={0xb3, "8cd8ab7a8dea2d6a1b059b7025979d36b23c5e904f9895d7fec5580ba332cf1ea7e906275eda18c87e19cc71b78d94f34fb37ec8cb818ff20f412c8bf309cfc7d0e42b6dbd6282c6164f9fa843d4e02c3db0aadb911b046964aff5df74bdf0d8cbcf80ed1af094aa0e49c3ce572540cea386e69c69748700e841483a44ca9d770f4b33e72fd1c9bf717203087657ba419bad6adb844736946a0438fb8a41461bfa7d2b1cf52cb3bc7f5fb6536faeea731ed4e4"})

11:18:54 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x4000000]}})

11:18:54 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5000000]}})

[ 3093.396401][T17119] kvm [17113]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:54 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(0xffffffffffffffff)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:54 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:55 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:55 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x6000000]}})

11:18:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

11:18:55 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x5c00000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:55 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(0x0, 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000140)='ro\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80000, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f0000000200)={0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:55 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x7000000]}})

[ 3093.935252][T17159] kvm [17153]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:55 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:55 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x8000000]}})

11:18:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49]})

11:18:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x850e40)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000180)=0x9)
ioctl$RTC_WIE_ON(r3, 0x700f)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:55 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:55 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x9000000]}})

[ 3094.278858][T17182] kvm [17179]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:55 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:18:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

[ 3094.557767][T17201] kvm [17200]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:56 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0xffffffff00000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:56 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xa000000]}})

11:18:56 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, 0x0, 0x0)

11:18:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
socketpair(0xa, 0x4, 0xf8, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@mcast1, <r2=>0x0}, &(0x7f00000005c0)=0x14)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:18:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]})

11:18:56 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(0x0, 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:56 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xb000000]}})

[ 3094.881336][T17219] kvm [17216]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:56 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, 0x0, 0x0)

11:18:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]})

11:18:56 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xc000000]}})

11:18:56 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, 0x0, 0x0)

11:18:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000200)=0x80)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x402644, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r5, 0xd2eacf3fa4f5893d, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x44}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x20044020)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket(0x10, 0x1, 0x81)
ioctl$SIOCX25SCAUSEDIAG(r7, 0x89ec, &(0x7f0000000840)={0x8, 0x9})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000000240))
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x9d)
fcntl$getownex(r9, 0x10, &(0x7f0000000340)={0x0, <r10=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000005c0)={{0x5, 0x2, 0x1c, 0x7fff, 'syz0\x00', 0x8110}, 0x0, 0x8e6feff162757b53, 0x1, r10, 0x8, 0x8, 'syz0\x00', &(0x7f0000000540)=['\x00', '+vboxnet1trustedvboxnet0cpusetppp0bdev-\x00', '\x00', '!%+]\x00', '/dev/loop0\x00', '/dev/loop0\x00', '!\x00', '#wlan0\x00'], 0x4e, [], [0x7, 0x1, 0x3088, 0x8]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
uname(&(0x7f0000000440)=""/222)

[ 3095.204983][T17249] kvm [17245]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3095.278321][T17254] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[ 3095.324486][T17254] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[ 3095.359508][T17254] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[ 3095.494846][T17259] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[ 3095.503441][T17259] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[ 3095.512049][T17259] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[ 3095.611667][   T26] audit: type=1800 audit(1572088736.799:264): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17790 res=0
11:18:56 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x2})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:56 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd000000]}})

11:18:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

11:18:56 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)

11:18:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000001c0)=0x80)
getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000200)=""/170, &(0x7f0000000340)=0xaa)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:56 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(0x0, 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe000000]}})

11:18:57 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)

[ 3095.843336][T17279] kvm [17270]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:57 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)

[ 3095.940326][T17289] kvm [17270]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x10000000]}})

11:18:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

11:18:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x11000000]}})

11:18:57 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x3})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:57 executing program 2:

11:18:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

11:18:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x12000000]}})

[ 3096.399863][   T26] audit: type=1800 audit(1572088737.589:265): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17794 res=0
[ 3096.426783][   T26] audit: type=1800 audit(1572088737.589:266): pid=17284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17813 res=0
11:18:57 executing program 2:

11:18:57 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x25000000]}})

11:18:57 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x2, 0x84)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
restart_syscall()
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="060000000000000006000000c54f098b00000000000000000100000008000000080000000000000000000000000000000000000000000000010000000600000000000000000000003f00000008000000000000000000000000000000000000000000000000000000060000000400000000000000000000004d000000000000000000c0010000000000000000000000007f00000005000000ffffffff0300000000000000000000000600000007000000000000000000000000000000000000000000000000000000200000000200000000000000000000000004000009000000000000000000000000000000000000000000000000000000890200000200000000000000010100"/296])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:18:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79]})

11:18:58 executing program 2:

11:18:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x40000000]}})

11:18:58 executing program 2:

[ 3097.283907][   T26] audit: type=1800 audit(1572088738.469:267): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17811 res=0
11:18:58 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x4})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

11:18:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c000000]}})

11:18:58 executing program 2:

11:18:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x40000)
write$tun(r2, &(0x7f00000005c0)={@void, @val={0x1, 0x80, 0x9aaf, 0x7, 0x1, 0x9}, @ipv6={0x0, 0x6, "65120a", 0x112, 0x3b, 0x9, @rand_addr="4f254a9b1d73bf3c6fab7628fe7f1063", @loopback, {[@fragment={0x4, 0x0, 0x2, 0x1, 0x0, 0x5, 0x64}, @srh={0x6, 0x1, 0x4, 0x235, 0x80, 0x20, 0x8, [@local]}], @udp={0x4e24, 0x4e24, 0xf2, 0x0, [@guehdr={0x1, 0x0, 0x0, 0xcf, 0x100}, @guehdr={0x0, 0x1, 0x0, 0x6, 0x100}], "ca51456944497f870cc95085f1379a95e2293137260f056b1934e69958567870c4354e8d7408cb65627e67b502589aedd435a333dcb14b1007745926e38481fbf97f1cee1ed3b5e4f7c720aa08b7dcf5d9da089d9b5ff50158e27768c74993d37d0510e3f55801c495fa784070b84e1e5eeae148db1141d7d39be5eb5d88f2a5471c27e216d64d87caee66fc677265283f81614d0d26b649bb03f2691bf8be0c1a85281312fb0bc511b86bddd0221bad6de8033f3714ba95d85cc315b12b8211caeb9a395e3c8b53b3844b724159c496ad70725038845784c62a58aefe65575ff5c9"}}}}, 0x148)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000200))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:18:58 executing program 2:

[ 3097.406775][T17368] kvm_set_msr_common: 3 callbacks suppressed
[ 3097.406785][T17368] kvm [17364]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:58 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:18:58 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000000000000e62c9c8b7112fcce2fab838834c24fc0b5c94ab6b35bdd2067000189b48dd0877e54679ac6adeafcaab5c0d269d04613d0060f85a0056b8beb66b4a233f20011ac1eefeca1fbe7bbf8cd01b9a116c56b00d1561d6a466598b0899ea7c3e8f87ce382d8120a4c88ac4b076c2dab43a645217d0f54785f6853eece119631617fdc45b37932970f195cccc4b100b4e0b105b05af3fd76ad58f09839c94f9618c80d0f12a44f21f1a33e93d546304520f952e64dc149ed1dcaac42503a9df06918f9a9330115281761d73c8accd3d6a9a23dccbd82bc35382fdf652c63edb6d9a520d99b819d45427909e9c1ddbfd24de77b32bb050bbcaf134434f3abe727538099e4427f35e6c7be6e971e3d5fde52ed5b43db21c0a37049ae887b2c5e3aa8bd85b1cb012504c987fba626ec90088b29ac94b7596d67ab42ba8e7cb1674d6f15ba19c65cbc0f23a280bb6ae76b35ee77b3e8c6828ef9bdb311b4fb8309a02b2bdd9571b9db5cb5c61698d8f056d292e1892281b2f2e4dc762a8dc9e0b43cff8621778f2589563aa1865134a368bb9480b1009ed97b8eda97dbc4d184542e288f4904d03d2c5f1969b8290600a663469037ca1f0bd20287dfed782d782dc1bcd6bda0e1eedee8c0b47940625f30962be898d83a5e45274e5df97a12038612fc92d8592d20f5584026f31535c23ac996e86b6f8cb17f6a426dbc379c164ea65eea702b49269ce4076f5efc6766b10c805d9caf737a15f9ea2a0c7d3cd394993b806b2a82d893dfdce6b52b04792075ae140d9c3bcf9643538d07791c78e43619647d987dc48e5bcc942a0b67c30dbbf7a29678e39e014df6d63827575b84a4ace25ee08451f4a1f68ce2bd3884b8cbefebe1a7df276c3739d62e169962a5e4a21960de891b79a0ced921df4d9b4984831356288615c68fc1c68ded06d7d75abca52dd0f08a7b77759690a9c58a266af4938f1a5beda772c4b11942c7adc48e5cc373b9a331151f8b342af4e45a24716702f73aaf36673e5114a24752f8919215072e4c516df65541ab2abe2b12b867c40142334c2b97a3b030bf2ddf84585392a4f87d13dcd2700e8100927dcc5b6fa0b1d0beed9313b9afb4b1af3704561b257a07cfb188a32c5ac266974910a93d3b794c29ac3f0ecc0fbc4ce28ef22ff91acfeda91ed915d8bd5c77c956db4b321d9596399e89813d6e10c81db64feb613b9187d9f71884c80b656e5665b63ad6920825390144f564eba4145de996be6088759dada8042b35be357d5502296a300d4eae1737f78224e289679e91b4e9b99a3e2c1d854324e9314181f7d5710dc5d2708ef3527e84392a874a8c2cce2b5196d12800d437495d39db4af2321e805670e5e5f46c9516f295b6c1f4d5989723f889798760388ca2e0d865d7ebbab42613c607cc25cdfbd1ed1d6ffb437f41e0f60d061370798ab00d6959c62e85e79fe3c96e1888e6de5a50fbf92e0aab8e18455e51b1accb7bd46e28f4130f679b8103bd52412ef6aff18a543c789bcf23a5cf14d27a49a2974ef203d181a4c9bbc5e2863e795b9d4357467a9413e0a582a91c8ec1e05f3b6d89accd0c3083685c6cbed740fa530c126ef218e2aa2af9507557fd33a8129424d14ba0cf18d6090b6d759611d87c3f487fc3c6ae99cde75f84958be72bdcc6524fb90c94cf629e6fe15c30b610bc86901bc06a69d9535916baa83050134546207bc50c448210e59a1a3d78780828406e823367f2e354d7022370d1c36f10e536e5cbb7960e8f1f1d1b364fb1009d26c84e686ec56bafc31571cc4096f757a04471687dc635866aea35748628610018ec4f6226ab2174f21443625783114a9e056a8e7af0de882e1df51a3d9800e7140acce81070470ca0fab0883209a4af254bf19db413678b5436e7a712471fa5e045487eb230b005fd1c4d6ada0452552d0e51d9470c11e03c14225aec4dae7372f51c3d5e7d4434da8481e7c5a7f182f6396d3058b02cbbd3368beea427dfe72060338e97825e0a0602263d634030b2911806db3a90057418197d192bc486b55d04c15f82294b1f4d00ab72e309ad28404e9c802ec1cf8f8d30a8c2ce6951573aab0b1fd96a2d19cf462390da25210c54762db8b1bcf50dbf080f721ee8fb67930a186f335527c279d8b759636d3643c110f98fe9659adcbc89e7e15a34e976dcda6ff9b309f304b1bb81069c86fc984a75252aac19de3ff4498429484cf0a761919b204f6fc5771f52157f93c4f93974b6eaa44ee85b01c1c60d7790ff2f72aaf7380e0db057e7cc352df5ad25b799309152b2d8785e36ed9c0017d9f38c3834885e4dd37517bd6e545980ab9efa7aef46634532728cabcf5c873f3907d6e832e8c4c26cd14bfcdf7906a0c11e70817f6e53365f192727c6cbe5ac7bdd9bcdf5e95e806f4e70aaf7c2350cda0c23c122e7b18f6cb2adb47bbabe83b3de5dba3aaf41b563d9ebc8df0287a6f5767be67c0cf6aceff24137253dbbbaa1b3a26055d339f3674a8adc6d439d9b5a4ac5c1b9e2c3240302b7c6325b34e8107329bcd4dcd064f9c2b9f4f2763117326d792f96579f7c3d361ad89eccf9f97fa5af3d06cda98d1d906eb64118ba56ecb85cd5dd465d52b65effe5943a88643093611f01c21e586aba981f1732924e0e8857d0b71b5fb6d54237c1d202a9b31e0e26d0857ff3795efaec514a31ff579bea3d2b3d9f16d93db1fd45db646e9619ac860e84bc2f74b5797f2ca680e5ba49deb6fb33238578d5d45da033c72019e7e0c450c7c7ed0567101e25441436bfb0ce32c9db46c3a58c812eacbe191c2259898096b73f240f0cb0e78838fda1842aa46054f3a8e09a658f94beff6bf12bcdd55e9c46b09a8e2f4efd47394b7a1efbd16533795baf74836cbfa2f6eb5dc95fe00023c57b41464e4f2105c6ddcd17f1be9c690b715dfe25c85246249b39ff8183c5b4daa27779e66b4fe91ec25cd31ea1b104b433855a4a129d2dbe518ad83ee71fefe0f6b590a7de2078bd4c67d72330fb5208be059654a8fe13ed82f7fe33aa261412c0c846e97c5308463a1ba77045aaaaa0923c39e19acf5a48a48b929ebdd8bf664803291d97f0e3025b12e5fac46f617d5d117b40f3b3f875b9785061f26c3292292cbc2ad560bdce3e9f79f4e11a7ac67ec6460bc1442b0fb33d0667513994961ba33e9c00189ac8c153036fdd1b845682985cb7e4c03ddb8b008d933cb76a4d6bb08c7337060bb34a3d57dd0a9ae7faa75675c3131ef8f6fc969f5b1dd7dc1fc2f316b6642cf738d582a2220a760aaef8fc039dbf846081f64f78d6194d26c1d710913249ac412f75fd6941c0d14e676b28a37427da7cfe87c00207d7ee27eca5d4ef0b715bece52303a9d9d1a31ab9935fa453d4f134a45ffb24ac00005f4bcb77f989cbd915455afc27958b49a25249daa1e5b5754d88ebea59ae3def38c73001f27bfa54254701006070e51a2b76c447e8bd5820551496bd32e6bde2c7cb37f5309272860206fd1149077d522207d560ed8f2c7e14dbdc646fff74d593d8c06a17913dc19cc7f9f16944066812d14818e919006fafb3744761882b0c8f3ad001c50237c97a86b942fcc0b7c2303f22c950bf3b581ff3940e8e1fa5f79f4f0bc57bbad749dea9c42e607aa2e07d69a0f09fd5d0814e51c255195a622e86175edf843c9b61098b2556a36b7ff9e78b516ccf919d3bd70e05d399b0f25b5f7db5686fdcc0a1f977d0ecf47b638762ab596476e5f6cf254bc523276f5513e96809b5646a30a1092562fb65301d5eff84141ebe1e2505d897c920b0023702c288be98c4c0a812496c2a9dee0de2c34982d9cd2eb0cc842d642f20f041669aabd354e5c0a60aec0d277b6ee162e20feb86d0ce4ad890857484fefc44f32e9264e2d01c4a6ae335c54ff784d5b5a91e752614f94cb160970a41528c8f271dc6ce5bd57136810ae4710ac65a4226f78c8aec4b4b41b9b6303f34ff0aa4ee2de9555a6cdff32620f8265e920e0270391fbd1e1552d13dff035892e7cb96b2b43677980ddf8da0ee6a4a0fa4c5c4f675e68508afba9669fcd83c958bb3eae023e947523cdde00797a9ee214b5cb1a34ada5607d42a2b82fbb998f50e6f4712533fa6259f701bdb11ee08face684631e660c1e2650c5324ef9122ff75dbd27e7d431fd795a65007cb66344e94336271d486692eb1610ceb9a2410d02d2ca4c6fb09b0ef56c8d9a00cb9695168d9fac1e480543f32f83894983e916c23a01ae162415bb6fdca5815b1a6cbce802692cf3dd0e4adbd7101ffe030bdb039503213a4e2e5a5270775460686df0b41b3fc7541483d92a2be2f8ea260f808c7f841ff08be57c2e27cdeb340b8363c45481221404ff02abb5a6e1fa534d303c3020d7645ccf77e882de30fff9cca528351109d1ac707c0b1f6f98e0f9d1ebf57064ef0020421550a75bcce32775ff6d78874a1a35429691c8c9c1b5fb69c8230da7c569bea2961cd50e503ccda635d246feae9f3d0a846153f45eb5d5f3fca50e7c2a85f6c771fc1ea49ee85f81c48561846517864ce70446437ee42a3743a222ee454cc34031e96203ecd8d949ce1bd21a7084d5db50953cdaecf6f31042f758f484fd5cee95df597636836a164f36888d0384062c66fd4bce97d1a8a3e94ee3029c9d2ff59a3468131aa12299ce84e275e14d6ee64bf7356b841cb33ea0e2c32f4630fed1b91776264397aaf887476a85a230ef44528902c546f39b43c35398a3b40b3a532c04705c451546a83cb8898b8b795bbf30b77d5df44a709dd1dde13782d64e822dd32e778047281a7e419992c457c8df16ca14b2e72fe71ab5e017c76a18bf8ae95480fb3bc1386152f90324ab57559083eb39f8de406246d4a29bb219e206a69b526a3df3456a76fe39015dd378fe47527da585345c7c28da8fc41f96a3bbfb70a4d246bce9731c5c097d3d22e2e233bd849c2a33a862589ab510434fa47f38254796ea8bfbd772cd397bbc02eaf96b14f6a48bc52fa59a1d9ce3b064d7b5f395b1525c3b4e34fd9d3c851a1fd503c2d0a04536dccce23fac914f3ed591e86ddbb884cf6c4fa358552e726f4d9e3642c4e8aaff6fc780b1cab14918abd6469ab43f2e94106160582bd5ccb5a78119753f0324904a481121bbd1cbaab5c997b611a12ec1be5ca86151ed0db88ba75a17bc59b62761a646b896fdc5a983504d44fd3e87fff6e2a35aef1a7139db7f17c2369efb72e58f1e78ad8329da990816cd7916b96ae8d81d176f09c39583c66272a1bac1f31efd17466c6e9de05e03cb13a7f9c972686bc27b8653070e39cbe6429d397ea40cb8534b3f59a13296e19588408282fc56f15e983ae1a3bee27cbf0399893bf5a051ffc427cba5964209a26b67339b337424a16a2f8f2158d7fb24ad07dbf4d1306575889fb01aca56e31535bc42a4320fa616b04b7ebbbfb3bb7d38f3188361c66f6ff64fae23075c9a8cdc121e6ed182d9edcff8433e4c9cb1f2ad980ffdc675c91549a71ed85952c786a3b997264f317ce1efa69e57acf824bfe3ad570ca2ee719b4954150c53e98a89133f327009bf0caeddf0018367da62949fcdfff3def3922676ae87be354505d243c6a6eb30883c374b31270ea553f4b74784f664bda55975eee55031566bc2488055c022423a470795880601623826d2d1ddbcacb0924f76886b9e1a7116e956cf971e24aa654519a634428e4c89fc7229738a7b614cc948234ac693cda0e9134a55f3b73f3b0ad8ee0d29298"], 0x1008, 0x800)

11:18:58 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b]})

11:18:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket(0x8, 0x6, 0x7)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000240)=0x128a28, 0x4)

11:18:58 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}})

[ 3097.789718][T17395] kvm [17388]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:18:59 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x5})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:18:59 executing program 2:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000180)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efde6d2b7508e04ce28551107dc8d0cc407f115e3fb180fcbe5fe86a6df9695019", 0x5a, 0x400}], 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

11:18:59 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}})

11:18:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]})

11:18:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000200)={0x3}, 0x8, 0x80000)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3098.157660][   T26] audit: type=1800 audit(1572088739.339:268): pid=17373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17801 res=0
[ 3098.177318][   T26] audit: type=1800 audit(1572088739.339:269): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17790 res=0
11:18:59 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}})

[ 3098.295810][T17416] EXT4-fs (loop2): unsupported inode size: 6480
[ 3098.315271][T17423] kvm [17419]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3098.379434][T17416] EXT4-fs (loop2): unsupported inode size: 6480
11:18:59 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:18:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1]})

11:18:59 executing program 2:
r0 = socket$inet6(0xa, 0x80003, 0xff)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x19, 0x0, 0xa9})

11:18:59 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}})

11:18:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x2000000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000001c0)=0x7ff)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000180)={0x9, 0x8a})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x6000, 0x2000, &(0x7f000001a000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:00 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}})

[ 3098.759469][T17451] kvm [17447]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3099.101319][   T26] audit: type=1800 audit(1572088740.289:270): pid=17434 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17818 res=0
11:19:00 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x6})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:00 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f000000bc00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f000000b8c0)=""/100, 0x64}], 0x2}}], 0x2, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="ff0000000017b60300e97f000000000003007b0000001000b89e74e13bdb3340090000000c8bc2fbca3cbf9f520e43ff064dcd0df7f615d03da033773bbd1a1f6ac6c4e10733151a5380f7c8f55173eca37596be15332dc2532ca7a530e6fac1735a9831ee49c36e6ead7996e0503a9846183602cf32b073301844360c4b46d307ae1501a67b3d517c41c6c852199c67f45d1dede4bfb9099a457ace9290f4f5a9f14fdf83b65caec26af88b3869ec0db076ee94792e29718264f1297af41e6dccd73e7bb200a2f5e6fded973661"], 0x18)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000340))
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1441800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0xfffffffffffffcfc, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0xb4}}, 0x40000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000640)={@remote, 0xfffff0b0, 0x1, 0xff, 0xc, 0x4}, 0x20)
setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="ff0000000017b60300e97f000000000003007b0000001000b89e74e13bdb3340090000000c8bc2fbca3cbf9f520e43ff064dcd0df7f615d03da033773bbd1a1f6ac6c4e10733151a5380f7c8f55173eca37596be15332dc2532ca7a530e6fac1735a9831ee49c36e6ead7996e0503a9846183602cf32b073301844360c4b46d307ae1501a67b3d517c41c6c852199c67f45d1dede4bfb9099a457ace9290f4f5a9f14fdf83b65caec26af88b3869ec0db076ee94792e29718264f1297af41e6dccd73e7bb200a2f5e6fded973661"], 0x18)
sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)='yam0\x00', 0x8, 0x3, 0x3})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr="3ac8bb9744e7c6256a56ea4cb2980862", @in6=@mcast2, 0x4e20, 0xaa, 0x4e22, 0x0, 0x0, 0xc0, 0xb0, 0x5c, r6, 0xffffffffffffffff}, {0x0, 0x95f, 0x7, 0x101, 0xd0, 0x8, 0x0, 0x1}, {0x8, 0x4, 0x204, 0x7f}, 0x1, 0x6e6bb3, 0x2, 0x1}, {{@in6=@remote, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3501, 0x3, 0x1, 0x1, 0x4, 0x2, 0x4}}, 0xe8)
sendmmsg(r0, &(0x7f0000007e00), 0x108, 0x4008801)

11:19:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2]})

11:19:00 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}})

11:19:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000900)=""/4096)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x40001, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x5, 0x70, 0x5, 0x4, 0x6, 0x81, 0x0, 0x5, 0x20, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000200), 0x4}, 0x1, 0xfffffffffffffff7, 0x8, 0x4, 0x8001, 0x3, 0x20})
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {0x0, 0x0, 0x39}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0xfffffffc, 0x1000, 0x5, 0xa7, 0x8, 0x0, 0x0, 0x6, 0x2, 0x80, 0x25, 0x8, 0x2}, {0x5, 0x0, 0x8, 0x0, 0x7, 0xe1, 0x97, 0x2, 0x7, 0x5, 0x80, 0xae, 0x80}, {0x800, 0x0, 0x5, 0x2, 0x1, 0x9, 0x8, 0x8, 0x1, 0x42, 0x7, 0xdd, 0x6}], 0x101})
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x9d)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=<r8=>0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setregid(0x0, r9)
fchown(r7, r8, r9)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x1)

11:19:00 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}})

[ 3099.474055][T17483] kvm [17476]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:00 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(0x0, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce]})

11:19:00 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9]}})

11:19:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x401, 0x42000)
openat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3099.855330][T17503] kvm [17501]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:01 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}})

11:19:01 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(0x0, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:01 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x7})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:01 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb]}})

11:19:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1]})

11:19:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x7}, 0xf)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:01 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:01 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(0x0, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:02 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc]}})

[ 3100.821513][T17545] kvm [17542]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:02 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:02 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3100.909911][T17556] kvm [17542]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:02 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}})

11:19:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x1080001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:02 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:02 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:02 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:02 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe]}})

11:19:02 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x7, @rand_addr="cca832b6e1752b659ca96ba6b751990f", 0x1}}, 0x0, 0x584e, 0x0, "0e972ed34e236a5c8cd0a2a0f6eeedc10725686d871267a7a023660d55441ef3f747fa8d4c9e7698bfb07cc96aee6c41ac095d67b9e413620f1d734843bd2deebf9948cd502384941fb57219f34a0fa8"}, 0xd8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3101.513867][T17599] kvm [17596]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:02 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}})

11:19:02 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

11:19:02 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:02 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11]}})

11:19:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})

11:19:02 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

[ 3101.964329][T17633] kvm [17631]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3102.158670][   T26] audit: type=1800 audit(1572088743.349:271): pid=17618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17238 res=0
11:19:03 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x9})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4008a0, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)

11:19:03 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12]}})

11:19:03 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

11:19:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

11:19:03 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25]}})

11:19:03 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:03 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c]}})

11:19:03 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, 0x0, 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

11:19:03 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]}})

11:19:03 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

[ 3102.689282][T17672] kvm_set_msr_common: 1 callbacks suppressed
[ 3102.689291][T17672] kvm [17671]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3102.788965][T17684] kvm [17671]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3103.002358][   T26] audit: type=1800 audit(1572088744.189:272): pid=17658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16519 res=0
11:19:04 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xa})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000140)=""/33)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:04 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}})

11:19:04 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, 0x0, 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:04 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})

[ 3103.135773][T17696] kvm [17694]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:04 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:04 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, 0x0, 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:04 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}})

11:19:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})

11:19:04 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0), 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:04 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

[ 3103.454877][T17724] kvm [17721]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3103.768598][   T26] audit: type=1800 audit(1572088744.959:273): pid=17710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16519 res=0
11:19:05 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xb})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3104.049768][   T26] audit: type=1800 audit(1572088745.239:274): pid=17744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17271 res=0
11:19:05 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0), 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:05 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700]}})

11:19:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]})

11:19:05 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0xa2, 0x8000, 0x1, 0xffffc528, r4}, &(0x7f0000000180)=0x10)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x7)
dup2(r7, r8)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:19:05 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:05 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x900]}})

[ 3104.216878][T17762] kvm [17753]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:05 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0), 0x0, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3104.346876][T17773] kvm [17753]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:05 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xc})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:05 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}})

11:19:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]})

11:19:05 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:05 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3104.589504][T17787] kvm [17786]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0)
read(r3, &(0x7f0000000900)=""/4096, 0x1000)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8, @local, 0x5}}, 0x0, 0xd34}, &(0x7f0000000240)=0x90)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:05 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb00]}})

11:19:05 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})

11:19:06 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc00]}})

11:19:06 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3104.932502][T17812] kvm [17811]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:06 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd00]}})

[ 3105.347550][   T26] audit: type=1800 audit(1572088746.529:275): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17832 res=0
11:19:06 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xd})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:06 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:06 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]})

11:19:06 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00]}})

11:19:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x2, @mcast1, 0x11}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @rand_addr=0xf7ad}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @local}], 0x5c)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400800, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = semget$private(0x0, 0x7, 0x0)
semop(r6, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
semop(r6, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
socket$unix(0x1, 0x0, 0x0)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r7 = semget(0x1, 0x4, 0x8)
semop(r7, &(0x7f0000000140), 0x2b55)
get_thread_area(&(0x7f0000000140)={0x0, 0x20001000, 0x1000, 0x1, 0x2, 0x1, 0x1, 0x1})

11:19:06 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1100]}})

11:19:06 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3105.504662][T17846] kvm [17839]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:06 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:06 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1200]}})

11:19:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]})

11:19:06 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3105.824388][T17875] kvm [17874]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3106.079349][   T26] audit: type=1800 audit(1572088747.269:276): pid=17856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17849 res=0
11:19:07 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xe})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:07 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:07 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2500]}})

11:19:07 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]})

11:19:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x3, 0x0, {0x645b5883, 0x7ff, 0x3012, 0x2, 0xa, 0x4, 0x1}})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2)
ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000200)={0x64d, 0x80000000, 0x7f, 0x1000, &(0x7f0000000900)=""/4096, 0x42, &(0x7f0000000180)=""/66, 0xc5, &(0x7f0000000440)=""/197})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:07 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}})

11:19:07 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:07 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]})

11:19:07 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:07 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c00]}})

[ 3106.918550][   T26] audit: type=1800 audit(1572088748.109:277): pid=17903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17855 res=0
11:19:08 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x10})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:08 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})

11:19:08 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}})

11:19:08 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:08 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:08 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}})

11:19:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]})

11:19:08 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = gettid()
tkill(r5, 0x2e)
write$cgroup_pid(r4, &(0x7f0000000200)=r5, 0x12)

11:19:08 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:08 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]}})

[ 3107.824269][   T26] audit: type=1800 audit(1572088749.009:278): pid=17954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17853 res=0
11:19:09 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x11})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:09 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]})

11:19:09 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}})

11:19:09 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4c001, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:09 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000]}})

11:19:09 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3108.137525][T18003] kvm_set_msr_common: 6 callbacks suppressed
[ 3108.137535][T18003] kvm [17995]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:09 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:19:09 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000]}})

11:19:09 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x1000, 0x0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0xff, 0x3f, 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 3108.746843][   T26] audit: type=1800 audit(1572088749.929:279): pid=18011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16802 res=0
11:19:10 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x12})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]})

11:19:10 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:19:10 executing program 2:
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000]}})

11:19:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000340)={0x990000, 0xffffffff, 0x6d, [], &(0x7f0000000280)={0x9909d2, 0x1f, [], @value64=0x5}})
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x402)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000004c0)={0x5, 0x70, 0x40, 0x5a, 0x8, 0x8, 0x0, 0x7fffffff, 0x200, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000000480), 0x1}, 0x41c0, 0x4, 0x8, 0x8, 0x56, 0xfffffffa})
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x9, 0x1}, {0x7, 0x1}, {0x1000, 0xff}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x7362}]})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r6 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101002)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000180)={0x9, 0x0, 0x4, 0x10001, 'syz1\x00', 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x4, 0xff}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11:19:10 executing program 2:
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8000000]}})

[ 3108.904796][T18056] kvm [18052]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:10 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0x526987c9)

11:19:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]})

11:19:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9000000]}})

11:19:10 executing program 2:
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3109.160035][T18075] kvm [18073]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3109.540896][   T26] audit: type=1800 audit(1572088750.729:280): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=18065 res=0
11:19:10 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x25})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:10 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa000000]}})

11:19:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]})

11:19:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfff8, &(0x7f0000000080)={0x0, 0xfffffffffffffe70}}, 0x0)
r2 = socket(0x4000000000010, 0x1000000000080002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e00080008000c00150000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x30a, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000700)={0x327, [0x3c34, 0xfffffffffffffffd, 0x1b, 0x3, 0x2, 0x8, 0x0]})
recvmsg$kcm(r5, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000180)=0x2, 0x4)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x10, 0x4, 0x8}}, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
sendmsg(r7, &(0x7f0000000340)={&(0x7f0000000440)=@sco={0x1f, {0x8, 0x9, 0xff, 0x6, 0x8, 0x7f}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="191d539251dd926e6dc2d5a89c01d7434b247ad78bd58c3a62a1cc26103a3d1af8add79545d1e5dfa3acdec3e59e92e3638c2153da67d566efe7db74a4eb4994963f34ebd16936ec53b359b5c048d370cbd0d2b532770384ef31105beb93969c1564d3555ba539c904c86f4d01ffe27bbd50b4171a1a523b7e2859c2f3be3f8711e636b8c7188621bd73d3ab1323cf9539dd60d0a26a05564222a897477737b802df754c6fa7b251af7ff3e60dca60ee955622001d2cb5f308d30fa3439a970a1efd13554dd54975dc9a1a2d2878480cd40873b9a8bea61ebdc0f4b9de0c4e4e", 0xe0}], 0x1, &(0x7f00000005c0)=[{0x98, 0x1a8, 0x3, "6824fd36e806dd093f02b138a7bf229a12a6a03ac3260d949c21c041cada1b1ac435e611b52ad083c47264d2da5c244efc0f1cf1c3af9de23749482597fd03547eb0a7217b4fb356e018e23e8bc671c8e98fdb7f5efa2afecd02015cca432c3298c3eef4ab558407cef393e4309de5a76721b8cdefeb4267e62c32f976903b187e06e2"}, {0x28, 0x84, 0x6, "cf4c7f3bc3344cd635f27394b36ebef478cf428c7f4a"}, {0x50, 0x10b, 0x20, "68d7ff7e034b1472a27c8dc4fd942ccb97c7f66b57a5a57c17ae4364d7e0ed5aa6ac909eea29534137ed07e370b3799b3e81724fd4b1024efacc01a05e"}], 0x110}, 0x1)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:19:10 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:10 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb000000]}})

[ 3109.701811][T18103] kvm [18097]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3109.718409][T18102] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.4'.
11:19:10 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:11 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:11 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc000000]}})

11:19:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]})

[ 3110.121739][T18133] kvm [18131]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3110.318862][   T26] audit: type=1800 audit(1572088751.509:281): pid=18120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17921 res=0
11:19:11 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x5c})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:11 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:11 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:11 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd000000]}})

11:19:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]})

11:19:11 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe000000]}})

11:19:11 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

[ 3110.506430][T18151] kvm [18144]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:11 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:11 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:11 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10000000]}})

11:19:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]})

[ 3110.958598][T18184] kvm [18182]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3111.006216][T18189] kvm [18182]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3111.153941][   T26] audit: type=1800 audit(1572088752.339:282): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17877 res=0
11:19:12 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x300})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x28130b0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)='F', 0x1, r3)
r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000900)="af77c1242677b5245537e740444d3217b77687d64ff1f3a7485cd7b2a2c3b9a71af09765354c9f3fbcf1d1596a87efe860d2a1d30758f97c8ad08b9b99a3e29d0b547c1d49e598d0fbb8b9e056c9bf2d47a6a16c6bd1e06b33dfe405837dc573c3faec84a4f8dfbf156d09d9ebdadaaf02e00e9e31fe89e4179112b2cc2c6ed379c3bfde1e67799e7a7402d38d434edb9051c73abfa3fbe8ce67bfa40c1182ec1a6fbcc9411b47300f9c85a60783f296273ae92c1fa6d37e568ebcc308dfb8db62bfdbfe57dae469c08ddb3fb419281ffa544b7ffb4eef4433d8f92dce35d0dc9669b40e3264d6a21e1f6f94cc2778c458aa8e3eafd04a04f681694fa24980e18828f465af2274dd249c8a58b54dcd670b1e6f95853b92b4c3c5ea7b51636c9a93fbdb19245c06cddebbf9c8c3eef229a93c7499d493759221e030f6f3cf8b29372fc592cbd206245a9985d2702d0c78f3019c5c6d8ea09e0c71e4feee91a7c85cc812dafb42f5cfca152eaa8ba40a9879c8178fafe3bcb6005679565b889207c483877138dba3d04b8d40ec828b82e20460933df6738520fe8528bcd1353becf1994734b943a2c45691dbc237c23ab70ac841e330af2afaee05f403c8578d0d22a66d400efedb65fa9fe19b811baa74574e73ed2a62e1093aeba7c8bcb9b71a519bf0b578e9134619998a7d60ad611f253e535272e291b544241bbb512151ededf5fb9dd7b3e70a0a9d736a685bfc4a443775021a6eb2cbadfe5edb21ff7382a6870712bff7fa39f4389933d9e9284a7b753ad98678aa7ca68c50ef3c7e906c69947fbc3563374a271d00a622230027723bf9bef55440ffc9d03996429b9bbcf0b525c2d422b3f5d6f4b2284b21a85f3fe49f62ccefea3e2ba1c7d16d454b2588102d4cdb4e2378a7d1afe4dd4a71f2da65578ec932582da0d728d98f64288d36807ddd228f4480d9b7657e86906383929305b20599aed5a43b975e40fd35feb1f64ce6db0f6f4068f8dedfdda30790ed30459e3e98e3f3f60c52aec7efef2338162c9154a4015b7e3dbe350b0b94476b19d6b05974d1e1aed93d968fe3997b8fe207956eb913a051c9cb233f44b77927d6221a44aa313d99c6607c4921375f092035cdddfed87258883e12f54a1f6ed6f1070360ae3c2e12ee666868a9c5bfb32f846c3e5c1bc89c15201d17b543e817f8d32f8c80682ecb916ca3efa204895066a0a9e06931659b5428eee41003a7db5f4aabfe66d777bac06f038cb8bb3c5a1bfdc4bed2bcc8fa256a8abf606ef561fda902e051e14458d8c7a2b46973a9229ff82261d056b3c725a999079cdd1c8ed2ddea6bc32d51f2bdb654102d59bf4ba56d01f5fb6979ead3e522034a95afc6c885fcc998c56f96e24e3a686fabcc1375a17e7ae1682e8137f8d53949d1f384cb532205dac5ffe1a6fa906a47f786e0b34d90f3fb392772899b7559c99ba344d0c5384499b402a645cd947bcd51d920941630181f102bdd7a61e197f3968ead7d0d5f30be08135d0050facbac64710ac6a780ec73f456c79c6bc615cac9ebfd0782f64fd0115fedb7d1723e69a230dd1295abe2738b72cb3efbd5feecec49c0c569bb189334de64f9304aee5892a92fe37209a3f8a0cbb054f348ecb50237b294f4833c694e62554a15a6084fcdd88ae1badf65189b0861597eeac6b491e6e41c5eed77a2cf208300bcec35a358ced1b495b20d1eb90345a4e60175b98c99a3eb0739f0df3a941ab1a453684f701ebff415614aed106c4045c62b84da6285326a046bb0d20e0805a910883a61d6077401a876b1495a9eb746258020cdca8a19e665532aa1d1dd6309e8dc728ec84c9a90b6a147b3d91dfa8525aa38835d3f0a653355c9fc1307382f2828d18617cea5d90f6104311a86501c355c0560f4d08ae07701f4bd55a32f0433faaaaf4558cd059df1b063716229b9db10b7f6e2c907ff2dda5613b124382cba45f6364bf669f59246b9f0068d67a20b26940ec6689a36e6d2b7df26b2b916bc5cf2b274b666360133e05732ea7876682c5b4b37e4d15e10465fcd476699cefc6d8ccb3de14d85c53e57a8076a74acefa0fc384a342e1b5f9319e49574c3b4a873ba30f5e6b4a1afc50cada734b9843c63b3d744d11c69f6f5b22b31684408e87a95f88384252a8d663b0785d52eaf431825177e65da52ec143adf9a4d5c6d9b35ad7a8c162f87e75a4f931abbb0482ceb27083e8e15208d80390d226fff48bf8d1ae34f70b5abe4ad36312a943e30056172a27a9b9af9fc143cc931fb2d4aaca0a4fde7d583d7716afc2ee5c82ccb798cc445528a29933de18a656517a8f64e56dd09d0035e1d3046f9663e8e9f9a0e52388dc5f8737655c205c104638eb79cd7d2f87fd02f42b7d246ac35ee4f25ddd226bc9d72bde92d5103f1b71fa249e9a796fe7c15f66709f2baeb3f13a595a3fb5a7914fea7b640ded18c876b64a5f6def98ee17a17a024028cb9b046c8b7fd9528bc67a87ba924eb2e5a10fd7fce2b44b280afcfb3d6495b0e4e3493c1c3f2af2f26de68a0831804080a2709d6eb9b78bb7ee64f1a7004fa33f3e3dff2436f10ef3a13300137c1d83a8927356d559c953a9727fd822a81d76d497963b5c67444687c6981dbb9179580453a303e4fb93fc349aaee9d4370ae5d9668e94252cacd6d6e8701bce92b9b0cce0b48d215a7ec1b8c91ed1bdf3485956382609dcda186d93a48da699173f9420d6e77bec7c3dfd9505b6ad283d859f41f48547fc314a238c7c809b1a643ac8f9b5065f2821f87816c156b785adbdeb57454e0d97e5aa09d78c7831524415f066b0f783f60da9a31a5707df339fdfacfd71aee0d6fcb8aecbff77cb1fd73dce2b36b695c8413f0479d72cedf7cdc054360458873e7fb8790ea65812dc31da92955b5ce62be317e7a6d072bee66c270ac0f759cb5c58c98b106b2146a79041ddec967a7949ab72941e520c8d1b0fccd85e2bde1baa9b84f6c7f694367792034039fb2be6b9e41093ceb018fac681f529d061b68df8167de5642ae84408a57aa8df7e4c557dd887847fa84b788a3447a2e2789bc91ff00cef4591ba70da85f6e92b8d382a85c5bbc6928abfe864d3faa2b6ca1aca8c329358254ecf664cf971423261a759e2c63b89f1f9c4be1221140da74637d306c0ee4ccd4f63efeb53c65431b8cfdd727d437aa6d7c26a1466a3bc645faae124eb21327f79ee4f449fc02bcd33ba8a6aa479d836c9027be68cfb98918a1bb8f39563aace50f30b80ccee0f6fa80e8d25c8e91850c005ce837b6d79469685a6306ba8bf88f6bafe22f4494fd347ad941aba385279280c9b48f7c90d68f0f2f5e922fdfe6a88d9c71f69c2b2895df3cafe6ee6bd01b4e1c19b0d42e82383374825d4d70301b54a212c46d275cc40ff2537bfa235c3c91c8f545848a9d71d7d609c6ed77b25b2b86ee497c7e03565df7112d943b661b579ed18e7fcdb80c1b88491da0c339d3aa87b79de3bff0659de0fb6102ed7e2c438939d47df4ab8c0f5cc869f9d127272058350dbd1d0ee5bd3592d85829705ec1111e333ad1c9c67b29cb79aeae72f348e5b71440ac4834bcb876d52d8c6383627067cda3f1210527bb6cba4c7f654b7541cd01145f54da7d943daec1d8a6c150878b93eb83544bdb5a662cfd2c0a4d9016802a97bd43a4e2a8ba3ea0ec30680d5fe8df2a136b172288490c3690441e0f31c7276c5f4442f96bb47282777d58776c194dfbdf8c6e1d5223ab6d7e56369d7ce03759fe8337069532b3dcc8de38474208d5341a37d161c5b7df13ab290f51fc42f962635404186c70c0f02e5cd324fd36eb170160c03717a0c97d00bacf5fbe17f1c2836c6aca86268a27ddaf3a6256f0d6ef80c60cce7d626340592f2db18313917e0bec8f52673950e141ccabdfa9fc7987ec4597a14e3593a74d838b06ceb97da1cd899c492485263518d71ef1ce32f7be6b19eae1647ba00bb0e04f79c640fee2c7173c7ac6e7d072ec9f01975763de42eed4b857ae004b928eac9dff4f3dc7f82f9ee148b2823b64a7998673315cea655d023d52f4f76d51c7e3cf4c01a8e5e2e6e6a7c0c83290aab9fcd445cd9a96e1f677e6fd88a50bac2e5c8d892f79e72ef2da0d56f0afb23cf38b569286b3970eed67ec926a9bed3ed55749e72a714d69314eb1aaa3705b653a3eaad8068bbf8a39f2633476fea09fd6d7ea6f95f4d2173f973ffde7fd8e354e1c09ec786fec1f45bc9fdf4ce474fb57f903dc751b5dfe4c45d6fe22f85c869d96c0f6a6c9971c1c7cc4665b2d27c7949cf732cef378f78b42a28eb37bc9ce0e68da2ad75d394b5ad9a525924226ea6eeb81a5a86b16b7afd1b6cbddc67d8d89dc23d9b29abef38e532798422fe1a29914bf5acd6420fc50d491eee987597503ed6dae1d837899c2f51a0a132b30e9d69be16b2b459c96ae92bef5c9ca25fab54b4540b3cf4bd604eb0e622c837f101005721613cfaff636d1f57b3b3766e353efad1514c3646b833eb567bd1cadde47411b6c13b04a54519149954da83cd96f3d64a8d00a9b60d4497139f3b0a7eca9594ddc9f2ef81ece7cebcfe9e980181d2f4e5688e3f0b2a3aeb59221926b0c8b84b985cdb0c8eaa37cc2351100c13cd9904146e54a4f78351ea69bb6020c08aface7bd39a02bfb70219530d71b1d562467c1f568ba0a7a584c7aba2f7cf8c989ddc79941c920bdb7c4a42b4c1d690499a94ed8957f5b967dbb9f332d4006d7bdb78ea7ec4419c9e01ea58ed29311226e45f4695646ec0d41e776df237d2ea6f88ff33c689b2545235e3e3e903a6148c0f58cb09e220408af9974237069d5d5db05c40c80b1b112ee4066d54afdf66caf119dca79f2119ecaee28a37c87c9f58ff0effd52dcbc940a648668eaf9805578ceb44cc9fd15a8568ee43e8cbafa04bc3e896651b5ec82477c093a6c845a60e87e9f1b76360fef95b5797474f495af74aab87ed07011e28cb105a542d3cf5f98e2173f3864beb652900e2cd0ff3e969423776bb732b381c6e7c94a0c126747475a85ed49f82a65edd3550c2f78bbf42d0ed656e93bd14a11974961b8bdb246e592ca40082de8657957a3f10fc018c1fd9d86c3f3f37ea8db53b9c22c8ac6a46d7ead347084603546a48400bcfa5ba5bf6677c25ccf3d774fe376295bed4b3c0fd3b9ca99a1e67f1fc883d180b725d034429a351cb4d9b4da666451e9eef75fb1ffdf77a73ea53f6616d9a8052b9f90816f6c6a2f9aee62725bdd122bd5fccde2fd9f0d80cb767e89246f9a941ae257f05a3ae0926694c33b1584ae09b1b5b04f027e3d359c8cf16e56df36bdeb956b665b94b2eb262c45c08a30b5abdbd7e89f22bfcd4135db94204119c2c1efb117a0b34f2aef83b910489b265cd50cd8add3f8cc4775539388cb3821bdfab3fe10a09536251b4117f9e1d9a23ef5b090d8237c655f3ad9ee75f8c62a6af423ca3ecb9f1898f1d0178ce23b8cb5f1d0fdf2513ee36b0d436bb4c682ee6fc439937650543be7d49c7fd056dbd55b1cda507f0d805be07c674996c3c99da5a653b6d51ad76cfa93b95f9e44c3f4cfeeeabbbe7a821a30b4774b576f799a9292f0c5b51740a6cbbbc008855d0ca4ac3c164d0dd675d8c3b01ba7304ae93b008f5a7cf55dd53907a9a5119adcc86200d5f563a34c7c0ad802976f445daf39f418df8790b6130efeefe7af7b31d42b2933b358447d03250ea4fdc4f634e82eac3c75d067d98f1f11a9fdc9e5f9a7aa03bb424429e555001828", 0x1000, r3)
keyctl$revoke(0x3, r4)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
r5 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
keyctl$chown(0x4, r5, r6, 0x0)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r10, 0x202002)
keyctl$chown(0x4, r10, r8, r9)
r11 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)='/dev/kvm\x00', r10)
keyctl$search(0xa, r5, &(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, r11)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:12 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:12 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11000000]}})

11:19:12 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]})

11:19:12 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3111.304964][T18202] kvm [18196]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:12 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12000000]}})

11:19:12 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000180)=0xbc, &(0x7f0000000200)=0x4)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49]})

11:19:12 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3111.682771][T18234] kvm [18233]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3111.962296][   T26] audit: type=1800 audit(1572088753.149:283): pid=18208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=18205 res=0
11:19:13 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x500})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:13 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25000000]}})

11:19:13 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:13 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]})

11:19:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x94e3, 0x10000)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0xfffff001, 0x70d, &(0x7f0000000180), &(0x7f00000001c0)="2d1f9210ea20da555669cd4a08c77f9c4ec11b50606c717a4b9ea827abcd185e566ff86e33502de8aa6188cf59001adf567b34956bb9ed6b3e1b35913957a552a67aebb4c2aa3cbe97d4d2562d28c833769d992c208c03086d943549ed455b4a1fc0d55c1ba1590e9113aded37648cec3013066c1e4834221fa6deeed7f5583064fcae24124219839bb8ef6cc5063b5e05e4e66e78f60ae35b0d560c0bc0dd0df7eb073827c590f4a143d9308eaef9c61c30e9eed84ddb21d6958115d70bc29ce9fcfe92492282", 0x0, 0xc7})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:13 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}})

11:19:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]})

11:19:13 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4cb, 0xffffffffffffffff, 0x100000000000, 0x0, 0xfffffffffff7fffc], 0xd000})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:13 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c000000]}})

11:19:13 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, 0x0, &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3112.791064][   T26] audit: type=1800 audit(1572088753.979:284): pid=18265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17876 res=0
11:19:14 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x600})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]})

11:19:14 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x7f, 0x4856, 0x1, 0x7c, 0x8, 0x4, 0x11, 0x5}})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
r2 = dup(r1)
ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040))

11:19:14 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:14 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x100)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x9, @local, 0x1}, @in6={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, @in6={0xa, 0x4e21, 0x9, @loopback, 0xfffffffb}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}], 0x90)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)

11:19:14 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x3000, 0x1, {0x8000, 0x200}, 0x8, 0x80}})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)

11:19:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]})

11:19:14 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:14 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x0, 0x0, {0xffffffff, 0x40000000}, 0x6, 0x4}})

[ 3113.235479][T18335] kvm_set_msr_common: 3 callbacks suppressed
[ 3113.235489][T18335] kvm [18331]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:14 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='\x00\x13\t\x01\x00', 0x9c400, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
r6 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r6, r7, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setregid(0x0, r8)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setregid(0x0, r9)
pipe2(&(0x7f00000001c0)={<r10=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r10, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
r12 = getegid()
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)={0x200, 0x0, 0x4, [{{0x3, 0x2, 0x4, 0x9, 0x1892, 0x9, {0x6, 0x4, 0xe321, 0x3, 0xd123, 0x6, 0x2, 0x2, 0x5, 0x7ff, 0x2, r7, r8, 0xffff3735, 0x9}}, {0x5, 0x10000, 0x1, 0x80000001, '\''}}, {{0x3, 0x0, 0x7, 0x1f, 0x5, 0x4, {0x0, 0x20, 0x2, 0x0, 0x9, 0x2, 0x7fff, 0x0, 0x20, 0x0, 0x0, 0xee00, r9, 0x6, 0x1f}}, {0x1, 0x6, 0x9, 0x20, '/dev/kvm\x00'}}, {{0x3, 0x0, 0x3, 0x2d82f5f8000000, 0xab2, 0x7fff, {0x8, 0x3ff, 0x1, 0x8001, 0x0, 0x2, 0x0, 0xfffffffe, 0x40, 0x4, 0x5, r11, r12, 0x20, 0x9}}, {0x5, 0x9, 0x9, 0xfff, '/dev/kvm\x00'}}]}, 0x200)
write$binfmt_elf32(r4, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x1, 0x5, 0x8, 0x0, 0x1, 0x3e, 0x5, 0x292, 0x38, 0x248, 0x6, 0x3f, 0x20, 0x1, 0x6fd9, 0xcac0}, [{0x0, 0xfffffffa, 0x80000000, 0x3, 0x6, 0xfd, 0xaa9f}, {0x7, 0x3, 0x9, 0x0, 0x4ff000, 0x9, 0x4, 0x4}], "4f064c0ccae278e27dd5c13a056f2b0f006850014521c4072740136d419702373b6442c8fa742b31774f86ea2f274d1789d5cf56e308f6ea403d9ee0711ab376e880f972e7cd39bbde44ec27e5b0ec028469527b9270e603b5c7cee57a4c97accbb7896bded4bd0c8bd5fed348a3d02a501239e9d8c936805e14179ec077a982bd2bc652c42436d35927dd3afd4ff3feaca037e89753050b1e4d907dff76021228", [[], [], [], [], []]}, 0x619)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3113.689159][   T26] audit: type=1800 audit(1572088754.879:285): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=18223 res=0
11:19:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]})

11:19:14 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x6}, &(0x7f00000001c0)=0x8)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="68399500ae4a1d52ef3076250000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf25010000000000000009410000004c00180000000573797a3100"/98], 0x68}}, 0x98001)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000200)={0x1, 0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3113.800236][T18361] kvm [18359]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:15 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:15 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x700})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:15 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:15 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0x0, &(0x7f00000001c0)})
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0))
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x7, "9ee45a8d8b40ab032be5ea0c7e7335dc4592f27408a3c6f58f73755e4da92ff3", 0x0, 0x1})
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]})

[ 3114.024641][T18385] kvm [18380]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x4e22, @multicast2}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x763526ae5d88f1ef, 0xa000})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)

11:19:15 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3114.070470][T18390] kvm [18380]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:15 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x8, @capture={0x3000, 0x3, {0xf45, 0x4}, 0x0, 0x9}})
r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1f, 0x101000)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080))
write$nbd(r3, &(0x7f00000002c0)={0x67446698, 0x1, 0x1, 0x2, 0x2, "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"}, 0x1010)

11:19:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79]})

11:19:15 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:15 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000200)={0xc, @output={0x3000, 0x1, {0x8, 0x10001}, 0x8, 0x10001}})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x2000, 0x1, {0x1, 0x8}, 0x4, 0x101}})
futex(&(0x7f0000000040)=0x2, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000001c0)=0x1, 0x0)

[ 3114.291209][T18405] kvm [18402]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3114.370367][T18410] kvm [18402]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]})

[ 3114.566304][T18422] kvm [18419]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3114.622013][T18424] kvm [18419]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3114.745951][   T26] audit: type=1800 audit(1572088755.929:286): pid=18389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16850 res=0
11:19:16 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:16 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:16 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xc, @capture={0x0, 0x0, {}, 0x8000000}})
r1 = dup(r0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

11:19:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8400, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x400, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', r2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:19:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b]})

11:19:16 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x900})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/160, 0xa0}], 0x4, 0xf)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:16 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3114.972774][T18438] kvm [18437]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:16 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:16 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
socket$xdp(0x2c, 0x3, 0x0)

11:19:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]})

11:19:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)

[ 3115.328604][T18467] kvm [18466]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3115.603660][   T26] audit: type=1800 audit(1572088756.789:287): pid=18445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16721 res=0
11:19:17 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:17 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:17 executing program 1:
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x800000, 0x0)
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x18e000)
recvmsg$kcm(r0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000001c0)=0xb, 0x4)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})
setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x6, 0x2)

11:19:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1]})

11:19:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000140)=0xef)

11:19:17 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xa00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:17 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:17 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4)
accept(r1, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0xa})
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000002c0)=0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ec3d6e9f0ba9f9a0ff6e45390a4c2b49566dfbf9fd8270c8307edc8b489d69c0b4826a418e7e952eba4445b209612d697a25fb949d17bccb2dc332cf5e4f051c4183a5a7c4f6ca52cf079b5d4da29971aea193fba920cb0a42ed91da2ebda1c64121b044512265ad78b572ac7f4e43619acee9452f7c015596b8c0c2f8aefbbf60bc70e777c8936164152aa810aac05024cd21008bbd666f2490c0", 0x9b}, {&(0x7f00000003c0)="ecf74868d27e5411b32158c8e1b34c0f66ca7a124d70ec2d247bafa263f75af09f65a89bb00b0cf4393369f3100085467f2b3dd0476767f16671b36e26bb35750ba2eff3ffaa1946b9f2376e0e0141d3b4181a628b82d4dfdac8da396dc70edbdc9d5715def7a51cf681", 0x6a}], 0x2}}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}, 0x2, 0x4, 0x2, 0x1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="edffb031738a651a1f8dd3d5837bce0ce37702f550ef93874737ab1d5418064f84325b4ee0edc5cc17a8ed41cd18ae7d646f004cceef9968429a7cbd989f95b017e7d49f314b95f6d21b0794881ab5551513453e9e65e98c802aa391f5a827bb8d1951a216d2bf92ea96deb7e3bb4cc355bcaf2137536aebbdd7fea72743d265024aa8e5f84ee46b8da4193f73a640fd11392fb994ff4d5fa2c9c2fbd8295d95fc0ceafa78f809263bc108f2cedd1c859cec637c8ee17e68491a1d3855e3322fdcd42ed7ef30ede925ec87632e181b6c70912358e071", 0xd6}, {&(0x7f0000000600)="0f03bc80e38017e4469046d7e2cfb3b95f533f9af1bea2b57b971ecf94ef2bf8163aa07bce33b9dfdfcf17da35abfe2deb54d91e9eb3afac66f181455508950669cad048557066a7cfb570945c988c2747a6f1565e643298db9f5647de7035944727cacc15b6183d18f26a8e5d6e2f96fddfc170a201c31a", 0x78}], 0x2, &(0x7f00000006c0)=[{0xd0, 0x29b, 0x4aa, "e59dbff38a9d2c8470921178ed8996dd60658875cf98358d7053a69115c69c18922b27cae6c0235dda026c543cbc71f6a0a10cc7e1c007deeca4e8d41de620d90bfb03b570956051c9d3d347087ce55436fbe2f33189a2e2feeca2f298f956e67c48dc5d1265d58feb5a8808bbd1192dd464ed66e48de20313bc062aff422117d7ae3fd435246cce7afbd067c945a56e96c8e8daa91e308549a1bda1e8d2f9415a9aae1585c60825c1a02d7a8f4c047ccf78ea71fe1647977e3e2e"}, {0x1010, 0xd5c812ea2adbbd68, 0x90b, "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"}, {0x80, 0x111, 0x1, "142e27590ffff333f7a8cb702378b63ea2b20eb91fd812bcf40da19e5d0ec676c5fd8fe09ea46b6abd5ee7544e486c87f3424b1791c65ce3c46789585f1f74bc703919d9b547f2fd2fd672cac7c8c9089c3de9a1757917225b2f454c06f96635b4586508dff0005b8be95c"}], 0x1160}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001840)="222df83c22723e9c630a6d4566105bafe4d2a488571baa844ccc9bf6077f", 0x1e}, {&(0x7f0000001880)="0cdddb12145634937e5065a466ecb74c47c93783ba48288b2ee6c718307fab28c10651a40d26c8953f3de81ec8558e14a8d41123c73e737ab39c59802ea3af7fb3e83ad43f7bedb70ab0730b8d9f257d5f1143e44165e4a77285d9483f87a0cdf988306285a05cd83995698558907b0f2004346ae800dad7ae30ce481c81f16fda98108c9522b8ebc4a704a82f979a05912b14bc797700ee11639d1f14af7715023175a60e6a0899dd43439391f6dae6c8c8b9872f5a206c7a03c4258c2eade7b48027479157086fcf8b6e7953d9ca0674063139e697e84a0f3c6c7c13", 0xdd}, {&(0x7f0000001980)="2ab89b6d5077c2b342e6ca3942f27ce690d2ccd7917fc4c1f7eaf6580d2e87afee83d2a2802e8a873bb55f0507bb40979a52d91000687db0806167fcce40fc7f088796961e494c8624934fcca07aa030c21bcb38ba53074a6b7093916831419aba9809fd526ec06af8f3b783145a44aad8bfe709d57b124a5cefe23dbb4c077fdfd769dbaca7e956a3215b356e091348fee68630feca9ea01bc80b87643742e2d37a1807d7b0b2", 0xa7}, {&(0x7f0000001a40)="e8bb23776c161e9a0964d3bde7e47724a4788f889368628713cdf459dae76114c61d04e50f79b516325c6651b10b262cbf37b87371a2cc2d6d01e333f98adebf996490a05cd541c3801a7a8800d3e0f20424b7f58bd8c093", 0x58}, {&(0x7f0000001ac0)="dba589e96d4a33f3d9b9cc87c95c06d80dd5a908912f37c13535c7fe219829bb55e64e19570a6a147e67a088a4cac5a0b004fc51037d280ea4f92a3910cbf0335c97c2fc865ace3182996187e77897f2a933a9fc1f564104bf9dcd28ff3d3e7757b711b7b0d7a3ed1816143e42f025a8d6bb8d05effb37076c375187b4d2fb60090f919ac294492a73984e48175b2423d432173c6b3a8cb41932d54e4f8a9356c75fdedd04e6d4dcf34beab6e49edf464b2a66e79bd8175ed2f61fff586e49e0c174f295eb2f3117b405f279a56c5433d8004c6c3b5c05a4a4b30802e679b8fcc229eaa190b218c8338292a700985602bd0aa8baad", 0xf5}, {&(0x7f0000001bc0)="8210376e524f153c3374c47be49a33bc52fb1d04d45058bbf6c9b6ed868c5fe26aeebcfefd706b71e1a7b3ed4b24c02d9b1cfd90b8a9c883dcc26051de7c9699c2651b20afeb5b1da91fd388c07cd002d8ab6d306a49b2881ba7a7ff69036e8a6f2ac3192255c80fb45d7590c758993481a52da0f5d7cebd3b18affbad08e5d174c8049711e57153325ef74265f403f24703d2a361c5d264ddb98ff302bf628926f2a0d6dfad796d705b57ab8b37db07554af5f01a8844e75e12cb4e70964f061e8d0582c0e1f04e07b523599e1eed71a37ccfdfe66243c5f30bd0e17729eb7e1e34e5cae380", 0xe6}, {&(0x7f0000001cc0)="2fa36ec870cb0fb8edb1ef881678829b6345b2ad1716500a16550cbf", 0x1c}], 0x7}}, {{&(0x7f0000001d80)=@generic={0x9, "52992ed177b723d22417ece91f5c29bb50ba5da517a144b195dd2bcab4a49045f1e4a4d3315ad7bc23eccde0ad83dd349f3ee92afeb98cfb7d66a11feb420d37f697a7dfa0ca66e41d7cffc68ce534c68eb16b010faf3f8d2da59014499cf647443bb28d76292ed6e55d6507bffe19cf6949a44f391e9224a38a32060518"}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001e00)="a961d78621582fb0fac08d03a8ec723de26f52f82ffca0b6164dd0f1e522887a884e779f23a019587601cd3c9ba42372f42e58ff9b9e6fc97b261483681c32cc4873e589c70994ba1255d52559a9f40483", 0x51}, {&(0x7f0000001e80)="4dd484a69376c1545f166c7cfc2607a4ed2e336b0ea85525e5428d3c00791c6d3fe17a40499982f4099bf4cc3aaa9e4ebb311af0e7d9bac7fd247198873fc197e54716add7185174dec1433402116cd41db2e24a6627ba4935f8fae68a4de9569ae60d8e5e92c64c11b732e5e9c355bb4a0625204e27a2288f482d06f92fb6079a58e2f8e460bfa286c2abb53f51686a3557e49317a1a97f6035003aaffde19a0f7d984bb12c802cb5eb66d95cf802a26fe604dc10839cb2dec954340195bdf42f40", 0xc2}, {&(0x7f0000001f80)="77918fdc5359a2a72c21db13d6a39f2019bc5b600fe6a19cdd1786538016aa1fce9a01bd41d2c368cbfc163bb44d6b77840be6f73021c9dd2ee438bc2500d7200758c86d5d7b98664884469f076377a952d94b7a51b7435ca99f75154986dff646845c7a2f377e5689be03cb52acc9b1", 0x70}, {&(0x7f0000002000)="1297a1778c1b9bec567054748e05c62c6a79f4507fe983868af118f8240104cf9212a60e17832a68f14c565012d7f2c90223a9e96fa0c56bf2fd2bc03b75a91657270d3fa5f2335b70535226c4b652d17b2977fe7eb052892cb244cb1741897bf2411f51cde1961a001382af47bc32ee7045dad46b09d49dbefc4b79f83509b4cbf4d491d81685fd", 0x88}, {&(0x7f00000020c0)="24c75390d4a8767033d5cbfba112ac40f14356ab571d8dbf5bb1566bae09b966b8e9bd0f039f9cc17417c50bed6bb1e61d691de86a6a06e522fd865e21b9c5e7547090a16e1f0c81ca2bb4b40690ebd6fb97ad0a00b4df9a5e07b940b3423fbe79c57a43be6e03cc3f91d449c3162fa1fce0c3821f019da22cacaf895aa23b1b28efc56352a54463", 0x88}, {&(0x7f0000002180)="a562f6eb2b67c9642a20d55f7e770262abd15a0f97ab6ee65563e6ff8fa3341f28189725b765f967fcd70b905faa638b0e054d6d3d745abd69b3b24cf347ea4341ee8d8b433aff7e7d4ff6ecc2fe3e3f4838d0425f1ce469b5683c3575226339b6b3cce25de9d6020568e76b2b642154606e", 0x72}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="f862563fc6caffd7999a91926db89b6fc599df587957f74e50bf201c206bea26b484330c1a46dea4be1825b0117298153f61120bfb6ee38b334cd3e55cae07d0e12605658faaa431a43289629e119a82bb8b475eab1d6cf8006b5ece708e824bfb6c7354932891ea3fd65d2b44951bec06dff05eaa72a721376b1ecff866b0a5019454df6fa438caaafc4a54caa7eb6f1ecfa16820c9aec430a511219c4ab5705354b5ca9ea9cdb10f1b", 0xaa}], 0x8, &(0x7f0000003340)=[{0x30, 0x117, 0x5b0, "4a010de182289dbb969da119df3995e1924e2a28bb92b652626e03194260"}, {0x70, 0x118, 0x93, "7dbc73ab48ec4b0c4955612e8561427d45d25a91cf304ff5f41f7dd701c9e22a682768d94255ca9cc379318766c06cc0664d82ee3d254a46d3a4b3ac331a64678c3f14bea1bbbf1d06b790da7a1235b011c7dc93f85383549d"}], 0xa0}}, {{&(0x7f0000003400)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'tunl0\x00'}}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000003480)="d22136862c439ad4430f146b82bf28712308bafc7df30e7bd233", 0x1a}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="34646272158096946fc4cd1ccd26fafa92a2fd134b4f7798dfcf88dba570c2a42705821c90deec75047f4422d33daa188eaf76374fbfd1a327fe87b368deb823b43989144039ee3acbacfa", 0x4b}, {&(0x7f0000004540)="a082fcfd87b75eca100bb1fbbf891c92894bd741e83a27e7829e9b74c13c4fda0d13aa55d5406f0f64b6e9c5b1295e63eb493e822d08f8ac7e9d1991a69e5d979cdf79a1dbf37f0b0d99751e1780854747b8c35d35a3923ae6872aafbdee605d361fe625ae45cf03221dea7d9f8ae72210c1818f277f1e9744f665561787a90fae46d34223fde6f51ca2945dc05fb58b224fabf0b28504cecf3fd0c1631027679ddcccdaa710f726ccbf7ca836b703a3d3d847d699322c21faa05d709c487c4b9e3172b01e84ab26e54fbd2efd37ab018d4e3c39e9083f7bededd4e42828aba48672bf3140e85fcac95322024880ceb09e8f4d2c542375257ba8bc304833f0620bf6b0a278125ef4f99ad7df8e19021ad9c7e9e4b5956ae380bee7d584638b707427455877bed24286916e74946e8b8d1c62968336323e05340d81fe58f2ecfc658053a39ad9e03649d7e64ebbfbff5dbc320fc08ca844013625fc9ccaf545f02c1082486be068736c3e1b414251aa01dd1a6830d1f1a82521b5e1e37f4933905a56498e4fff0a3ac5fdc4d1df7cbd82e5dd4e105736bbe14e1f0c49c51c9fcf0cd6d32e027240936e5ce51ff21cbaa92d81aaf18f8de8b86cb610218154f09a5294a616deeafb5fe6997cfb1e78e33f69aa8e2aba70d571d8e503f20ee64afbbb4abd7681686680ff906e6a16305a79c0b71950eb1652c1e2863320ec120154d17b207c3fd587460d9b9a6de6f94ea6ad3f5a12158e92f488685fa5fb5b40fd156b69e7f800e4e27c608d6fb129d44e149c2dc875079cbeb78a10b29667ac36a5aa120dbb85f210a85c0b09b1c0d0a52019baddb7da13cf701583e1bef242a0e0b8309677ea73550de720bc26e787ce3c03516a8293c8ea1107b3dc7d922cb71588703e7140000ddc0a7b920ddeac1fda98d8769647ac88d8de8e6a703d135a615f7f2904d742c97ac33d23c94a63e688d03308d295ac261b980ca30e527af0c913a659375e910ad55634afab6876005cd324cd95fc813f554bf09483c78792853decb228a066f1136d43c452c3716d4b663b6ffc863635bfcf52d17a3e97f7568c91c160e23c1f805f2e6ad8f0b5d42d1852baaf6cf681e66b0b36b56344edd81ff07897c1b4784446975cdda75cce4b51a453f0377bd2cf5044b6985dce5ac1d4ce6db0d4d26611da8d583264184ac5f3d6663030ab6db8648d543ca222dc9bd0bc32ef16cf0c6a48f411fbc10c1b67ca9de52ce2cef414f4bda520b157fcf6825cc82854d54f7b807b474b091f481aac0ba671af45341a5e09d385fada12a02e3c7350777df65fbf2c4a666f9bcf8c701f0bd249d978ee776008190e3b8ff70a189ee93a09196536d94ff4b954580b3244784ae084b2c0b73ab4f9def9d156a56273cd9f37463d1a1dd010404a6d6fd34e44e9e381b41120b608e0f1937d431e953ee23c19a592a5ef44ee35e7c479007d214e499ba8d69080afbfc88a0768d32f30a4aacbdd1b62672aaf99a2ae976749aae96c328d5e4738a54228a2171809c826bb56b87a633dba5be6f2d68e12da24ba840295b5ec45fb796a33b8eac5e670153bb877b90853d2734d8a48d01bf5e3d2c1820b5775c9eef06c3cbe2187d1b195e611c44b54a1646fcef4ff6c99234ad1d0c5138dda8c3212aff73fc5f22db9c62c63bfee912667bb94559ffb2c5a0bf44e6447ee0be3a0eb3ca8107b88bd0796f6459ee6600f3386efa0dd789348759a32b2241b20191257e121706ae07c70b6b84bed61bd3b4a4892a5fed46a2f1cf9bb7a280f24cc848e0d249aabcceefd521b2cadfc774f447f5344d81b4e772767d38f63343e9e48fe976926b1d8205ab57fdf5370ff0b402b1836c9e7db8ca1c42d25e921290bf6eaf1372b27eb8319724a4f5e46faa10c8a69b495ee7d5378c4acf28c774ab60f35997ee92c1aa39b859cc02116141bb0d36a1f08e60318a11f81323a5d24148a87d6927720ef0b6e7a9375fb4f9d0c26cc98c90a0a732b24a1cd62e3949b9958fccc9d4ec1416891faa6a32c256767e46476c84105b9c894eaf7d8d078531e7ba35db6313acbe88dfb0a1d71b13700f49cac49c3774525a33378c53ab2da1eb55337479dd3fbef119eef0701a09b9c605e61016a8b16ec23e165fe8008c0c60fcf426db89e02a7a36d71397088cf5116eafda8f4271cebfacf9cf4a59c73d7575d8e8fd3cf26661611a1dda8c96b18ee3db7ecc131e31d98a595049214273abf3a0a1207208c3e006f63646c273b46db072b3ca49afb39c70355cc036f67b0aaed7cfc32d90d12915b01c6981e1c3afbfe6a8143622d98c5eace3869f7a694cb6f9cf52771ba324945c94c0f55c08b3e392079400f8739b658e6c6025996d6b269f43be022133b52e0f886dd47d256f43eefa32b609b662215fd3c58186a62e14f982fb207ec29decfa26f91d8cb2591c82ea5874d30aebb4e7d1574e67b26f161d86b6b4a49f6bb89453d108e543f8e834737b437f746c1e2630295db2ccdae1055a1c75cb8d0b3504425ed112e2782a325e268e4f90d9bf1d1b8277b6b703c53920d237ce52482f0153ada06aba65e47fe6b0867189b0048c3c6f8c8e27e70d05e2856a2ae53d351f082654f4f718351e009e67250a838bbe98c7491f3bfd4e92bc6e77189f98ce32f03c87bbeab30fe3155188050347a65ea64fbd6bd6538926791321c83884d44ca21a86902e7c0e3a565dc03fd5bf7766bb36d3860b67630714ca12c92a1ab00a7450dfdfba3611b1d8a295e758c00ffd384fe27fde18c8ebdd9cf450437ebbfd61f526c331b364b6fa015b5208d496002dcccb6ed55ad685ba6c676599e294ec4786512f2a1f2892be275de766e9889eb29d1ab28ac3c5a2096f8f59f884167858f27fd42113224d897a781254cbaaa28159d402fa9cbdf5a571c34cd8708a60e426a5f7c600ce99c568569a28858fbb54fedb52560f9958f9b3e03562a39ef50c466946543dcd2d2c8b36d8ed135394f708a25165f41c6bf98a7e819f315aaf4591443e20aaad2921fed045d83c828d7d59f3b531608bf8e05243ee666451b42932d67efaba2ef7e29c3153a1b2de2485c36d0a4c221cbf6ad866842feca5bdbd7daa97f3cbda16c15e69c665aa401ccabb574aea691dd185063367106e801c66ba21b62f8dff70f003cfddec922b9f74017f901ff8bd2409611d0e869d312ac12328c412b8fcee29bb54db00ff61015c7d2fce8a40ae7c40c04891ac94f900fc870a3021ceb2bfd4cf7945cc19e3ea4dda892602360ca548b9e94aa031c5d19baee6966c072fa85e1a44de388d586bc8228e5856dc2e45408a1cf605e129d38c5de41f5b3e441cd43d3354a170c9df1e5a092611353327399256c3d41217a5e3c81b94d980266a8287ca1f6b5e4e6631cd580b31f5d3ce0b69cd228e074de63b2db4be2b15d072a976c3dd9e7af09e13b5c0fe5607b0017d5cb71690d6c1d65aeab8642281401d4dc1fd7107ab9b3e74f68ce685426e96754876f95f23dd4049527731fdfa5c23231d0b46beb6cd266c14260809a8b4788411dbf852b0eecdb9faa1ae0c1e331381c9a0f2bdfe03ec61a4b9243b85c001a83c848ef5c109e5522c4ce9f4ac02771ed6a7a161bc822150df06e858faba804cd91fbcc4780745ef64adcad966fcf6a6a41be21f4641e3ae670dbbe1329cda14b58feec0cd79aff21951b8678f7edc6cae6173ef8e7fdc60a7106ee310e05d8c63972be8b7f922d19e2e3a393382cc91b1a4ab8f8ec4a8ffb7db06318775cbdc55c4928ff5bf229cd7c52e1c009fa93661f3e5b80db2a2e506800abdc47eca3699bc36713d7ffcd48cfc152c2324dc9ca4259439e47bc8ef0d3c1e583eed3997cc539ca2625ad0dfc934bd91227b8095558e4f35e1b15aaa4d17b8a289e33c8576fb71bb007ae659428310b22890a704b5757dab20e574811704fdc028cd9debf84dc0df63abc15a1c3cacf0159c816011f2ea2935ddc4a0a9672753028d977d524dc81fe1d8e8db72852676586baa940cb6fc5ef0178b575ef4bdb3869af667b3a2928f50711316c73b2074ee10b695799080de31cec61d21d7ec0905fbbf9cb5301e08d89f7c637ad7423d95d0c51cf5b95335cca2470d5ab4207045d8cb767afc54ed55506047d64e371d613fd3e61133fd1fe85187551b202c0a4a45d0334367f9c6d1d14f00c925db4901e1530769fe5db74b0c9e56edb31d4a6f4a5e7ee367f9a6419a5f90faa205ae7e997fb151dbbeeaf0d88cae27d476b374f086ea52881c4673d7ec885efb32de72fc8ca3594499ecab9e9eac1a30e918723a1df3cbcc06547d07305f497b277f00361b5fe969557c6aa220c7e6f2c1ff5eac01d9d70b521e0686272717eb5521af35b0a48898fc8edd08350cf18a8ecf2ac0efbc7ff509bd3dbdd185f8fd00dbe69a2cc008a66090933cd2b7cffb66a634ffc8e329f88641e81720f26a0bdc880b8d0a96445691ca9b09e05b7a53303ce8261d9e3ca28ddb4d1281abab159d976d3c8f6f826d1b9b2f48fec745923f79ba4b5499660ff4ba99884390a6c397ab7916b27ea4c7478846be41e6213808fc295f6dc69e85d705b06dde2c8517ec40cd2bdc10139ef7787aea8a076c00d39d244a65d585f45ba4aa1365546355f077431e36f8ee383019f926bcf30869b9075d4d23266f9fb5d75ca8731b983f6d0c4d5ec6b2196005fac035e64d8b67d3666c49ddd7a3760bc7c74b81e9fca483f47aef415758164143cf5120643ec08ddf04ebcb27affa53fcf9c3617790123cb76fc1d5a531ed903a92a23ee88ae6bd29a97486151dd975d44c5496fef46ceb7c32c65fdae60421cc2facc7da59815edf05a30a6cd41c76739383d562d090c988a892ca2a4539017de2c869d0a068d914225394330224fc6c1c325fc5f276072d8a60e0ce39f6ee26896fa5657882dcad9738b377beb2d02027b311bccd6375aeccee7c537ff1bba3a7f76b38d0a588322998a2570c787c5cd8db326055a31e44ccf8308719731443f6217880848f503acd23517a50d80f01fb48278618e3b2bae8a0448d14bd46f0e3eb0f50cea579dc56abcdaa2a031647851fc6e0ef8106520febfb2fa352510c9043f9b9ce7357f8f4f1c993df646cc51bbbe98f6f71af00cb818f147c49d70f9b886f8bb8793abee17dc5a17138420d41d3017863b265cd6fb4d47f7e6355e0766d1c7de1c66c4a28449026e64812284256d3dfb5bea2fe14b6578305c09b438bd890d6ed6f6ff449985f3a1f5ee64f2bb44e62ddb134bfbe4f23ace972b58f98eefa1fb1691c4c1d53540ab6b038c64dba520f71451ad82aa1cf07de408d6b3a180e8c1ffda06dc4ea8ca9060dcd08c639a3065e6e4ce57ea8f834c42803ab95d7928802951cd880118196870e3daddc49c21f541c3ac9518fa1f631a86055b03d2e48be11efdc1a4666e302fbc2f76eb2078478baf6470822bbe149218b81321f2732e1c32e2aac65c171240f070b1005a85d0fbeeaab172beab7dc1f8e65ebd8aee1f91878fc5dfeb7eea4321133b81ea407bb2585780da83fdf017733024328108cd04728d2073d8c77e58a3b2d3c0857191275cad739799be84d278be18972cb02a0439db7d9dfde078d59cd9516fd5020f92a16dfc62f3d8127bf9988f16aacd9598adade34445431866f46f1d42fddfe8cace55f026d2e3a1ee88c68730584ab90c024108b351ea31444c410ff0f8aef2cd97648f09f04d1e2077bbfc1301a436f27826f4902ec0a59c09", 0x1000}, {&(0x7f0000005540)="59d94fe19b2a73960efbb8d7534c70d71bf4aa220c9d1f214f750a911d89808d1e9ebbc33b0bcba86a9e6e4ceaf7afec9fae829f0ed2fdfba89c859b57e645c748f8ce60007fb12dcfcdaf438530d2c88862cec5fe9b7de68a64b8feb1179ae035eb7d5abd3619ca27bccabfb32f52eb77f62bd3501dc13cb5269e217cec8221a08f01de69928be026d3fda4686db7125b2158c7a7ebfd9030d7b5ca9eca79d63022a744f54694968f45a416459691d7679089a23e8f84d8bc0aec969ccdb5bf2e3108bbf483a9308b3d2a4dc4fcd6ef0adcfc4f8f71d93929404823110deb", 0xdf}, {&(0x7f0000005640)="a6a43ce38c6e2c81473af985ff98fe6685e9cddcfe14fc92420c846a7741f92e804a3d740be6cbfc57d1f402d0ed8054efe1a55cffa9d7ba67bc63b82716f71208fbd08f483c11cc5a1267d02a0176df9e96c918", 0x54}], 0x6}}], 0x5, 0x20000000)

11:19:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2]})

11:19:17 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0x8f5, 0x0, 0x3}, {0x202, 0x0, 0xfffffffffffffffb}, {0x95d, 0x0, 0x200}, {0xc018c87c12880fd3, 0x0, 0x1}, {0xba4, 0x0, 0x3}]})

11:19:17 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:17 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

[ 3116.509200][   T26] audit: type=1800 audit(1572088757.699:288): pid=18502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16753 res=0
11:19:18 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:18 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000580)={0x8001002, 0x100, 0x1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = semget(0x2, 0x2, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f00000005c0)=[0x8])
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
clone3(&(0x7f0000000380)={0x100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000002c0)=<r5=>0x0, 0x2f, 0x0, &(0x7f0000000300)=""/76, 0x4c, &(0x7f0000000400)=""/238}, 0x40)
fcntl$lock(r3, 0x24, &(0x7f0000000500)={0x6, 0x3, 0xfffffffffffffffa, 0x7fffffff, r5})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00')

11:19:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce]})

11:19:18 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:18 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xb00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x1)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4cb, 0xfffffffffffffffc, 0x3, 0x0, 0x5, 0x0, 0x0, 0x3c, 0x20000], 0x20c004})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

11:19:18 executing program 1:
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x11, 0x1, 0x1f})
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xf64c7fefe073e22d, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c80400493d939bd8f625c8d3ca6166235ca0453527a0311ad1b1db399588731396e100000000a2805e9b3f3edbeaa56897d71209ec43548b09983d38f69063ad78f0e881c7f69d210b5918b83aedda2391292718e68761cb7873677628a9567583c495e4b270f919edb56f56daa7d8c8be051e46aece04ed55db148aaa2fb25c4101a05771a767ef6e74b5014e337bfee11af5920cbd6939bad6031b9f232f79881600e51cffa92f620d", @ANYRES16=r3, @ANYBLOB="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"], 0x4c8}, 0x1, 0x0, 0x0, 0x20004080}, 0x110)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000001c0)={"fe8e129999e97753c15c61ee6f794c91066b4484226af2ab3d0ac262da62d45f59f19bb2d8ef940c10b03f8e1674a70fa2294398e88df08e475aa4d1e524f2a848832b6869dd1803ae3cb515ba014a3bd996fbafd28676f95c4dff1b0642ad7e483e7a3cd343c38773545d295bf857e601b8a40409893942a126af7f8b8029f1c8bc9ca3e44cd32cfcf9d93817fb94a1bffd2cb5918d59386653b81d3c16d8fb81fa1826384b01c1ec755b555107e1500099992b0c75777252ffb1c5ac78c45328447d0b824fc373911ee0833fb045efcadbf0a43b825367e173e2c7460c21ceaccda7bf883bb24c07d5b215067661249934cab453fd2981d4a0cf2b62e71f15f6e9260c2eed8b4aa504c0b98bdedd4026e18684e5f8e011b4f2d9a830d332b01e6b7310d7792a8d84b5649cf28bd942d720e0e2736ef1911601153cf6960a291f0182efdc111f3b8965e1dc7f9dc8af1b4ad90b994c840145595e02dbff17c458f5df7a62bfcb7af6406b63ba7cb85fbedfd2150b6512f2010039e7269f8ce74ca49b6d53612aaa1fa5749e3c42d9a3cb7f2a6520710d047a262d937a3304a251a7b244f40da007fe7bbaff0edfbf8c8036fc5eda82159fd02be05abf901f943a5a049e53bb3cdcaab551264fe263e62cc0e81636e71b6d8782c30c6dbdec753f8bd24402cb326fc3554b9a8aac90fefa8812790a391e59ac2760650d15296eb9e2611af67721bb55ef2230b2f564958c603bbc5d3973b0c9a60f37bb0b6e5f07b9c39e8369a3eac5227e8053cd794a4c5fd22960f5d031feb20ad22d4e7821641501344ebc17abe6a67c307ac3708a78b86477fa5bd7012b7b905df617c0c73d2de472f5109f465da648ce7b28901e309c7902e5546a0885b8a246c58edc12505991aa049f7222a2418f505ccdaf2f108f3d84fa43f07104c37659c32eea2127f6e893423975bb40303be894c56fde394c5785ca6b06fc55fe97c041bc5e07cafa73d0a29e0a89f32e543c531677204cdf5e0d278cfdde025a34dda778d32ca2c964cd620913186760badb08015eab736c4063d15b0498c27c7287b063a711f812ae4ac40cfb0bcf087cb26cee652a07530e6e8f6dea74ba06b4cea877488cda0a6cbd0c20ad05cea92a4ee701fb393bf75dff20d7d1845ea8eac48c749c2617f31f5b641242d806b1c811498e7211562eca5431773dec4bb5d1df179ad867739fc4926486a57c06eb351b3bd358e7a8c4b1c96ad6215438374f79a2add8af89a4ad507b10e1eebeea5495d29ed1b433303c0519f6318823b77e85e766f6cf30937e1a951a7f7ad7e5a0f6f78bde056c000281dfc73aba159f3216e7ac8ac7d318c7b94496e6fc3dc161513df91b1ce79c0f7f35b4900b892d157adbe0fec3c5e84cb26f51371c8476f9701f801c9fabcd2e843e700d8e3e94f3350e0ca4b0"})
r4 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9d)
tee(r5, r4, 0x4, 0x4)

11:19:18 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000100), 0x12)

11:19:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1]})

11:19:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:18 executing program 1:
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:18 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3117.551844][   T26] audit: type=1800 audit(1572088758.739:290): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17299 res=0
[ 3117.579236][   T26] audit: type=1800 audit(1572088758.739:289): pid=18555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17329 res=0
11:19:18 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xc60484a34b6e8862, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x261ff9e1, 0x7, 0x40000022], [0xc1]})

11:19:18 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = dup3(r0, r0, 0x80000)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
clone3(&(0x7f00000003c0)={0x8000, &(0x7f0000000080), &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200), 0x15, 0x0, &(0x7f0000000240)=""/125, 0x7d, &(0x7f00000002c0)=""/197}, 0x40)
ptrace$setopts(0x4200, r2, 0xd22, 0x100003)

11:19:18 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2)
write$P9_RSTATFS(r2, &(0x7f0000000000)={0x43, 0x9, 0x0, {0x0, 0x50000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x43)
ioctl$int_in(r2, 0x800060c0045002, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
r6 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x2280)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000180)=0x3ff, 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:18 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xc00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:19 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:19 executing program 1:
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x5})

11:19:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000000)={0xf973, 0x1ff, [0x8000, 0x3, 0x5, 0x5, 0x2]})

11:19:19 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:19 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x113000)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x9, @output={0x1000, 0x1, {0x6, 0x8}, 0xfffffff7, 0x8000}})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0xc5f, 0x80000000, 0x8, 'queue1\x00', 0x1})

11:19:19 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

11:19:19 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='Y\n\x00\x00\x1c\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000)=0x3, 0x4)
r5 = fcntl$dupfd(r3, 0x406, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
socket$isdn(0x22, 0x3, 0x7)

11:19:19 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x200000)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x0, @capture={0x0, 0x0, {0x3e}, 0x0, 0xfffffffd}})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0x5, 0x1, 0x4, 0x0, {0x77359400}, {0x1794d8b9c042ac09, 0xc, 0xb3, 0x8, 0xff, 0x5, "cfcfaea4"}, 0x6, 0x4, @planes=&(0x7f0000000040)={0xa8, 0xd103, @mem_offset, 0x5997}, 0x4})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d)
dup(r2)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000400)={"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"})

11:19:19 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

11:19:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c066ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x9, 0x2, 0x2, 0x7, 0x8, 0x100}, &(0x7f0000000200)=0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fanotify_init(0x2a, 0x1000)
prctl$PR_CAPBSET_DROP(0x18, 0x13)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x2, 0x4)

11:19:19 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xd00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:19 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100))
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:19 executing program 1:
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0))
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x2580)
prctl$PR_SVE_SET_VL(0x32, 0x2d26d)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/12)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x1000, 0x0, {0x2, 0x2}, 0x200, 0x738b}})

11:19:19 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)

11:19:20 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

[ 3118.788718][T18677] kvm_set_msr_common: 5 callbacks suppressed
[ 3118.788729][T18677] kvm [18676]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x7]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:20 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100))
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:20 executing program 1:
openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000200)={0xd, 0x1})
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @win={{0x7fffffff, 0x10001, 0x1, 0x3}, 0x3, 0x2, &(0x7f00000002c0)={{0xeb8e, 0x61, 0x5, 0x80000000}, &(0x7f0000000280)={{0x9, 0x933, 0x3d, 0x1c}, &(0x7f0000000240)={{0x9c, 0xffffff81, 0x7, 0x4}}}}, 0x470, &(0x7f0000000300)="35cb2d47e18a0b5706a81a4b0573bfbd688ce02f5b5aeb079d1a0e5ae2956bd3da9cce86a12b6056936e10991035179b2a415f624058de5a878b9eb7db6179924e091f675ee427ec0c3a4be38f357f059c51f849d53b68e0adc85cc78163bab483f8e0c6d02b32448f21013810efce6c036a48006683d5180c6e2395b7663c30363d57cad87a43ae22b9fa684311", 0x8}})
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {0x0, 0x10}}})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x212040, 0x0)
ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000080)={0x1, 0xe4})

11:19:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022, 0x80000001], [0xc1]})
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x40000)

11:19:20 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

11:19:20 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/\x00\x00\x00\xe8\xff\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3119.483503][   T26] audit: type=1800 audit(1572088760.669:291): pid=18693 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16807 res=0
11:19:20 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xe00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:20 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100))
write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9)

11:19:20 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)

11:19:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x8000)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000180)={0x8001, 0x6})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x2, 0x40000022], [0xc1]})

11:19:20 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0xffffff2a)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r6, 0x5}, &(0x7f0000000240)=0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={<r10=>r9, 0x4388, 0x30, 0x2, 0x1}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r10, 0x2}, 0x8)
r11 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r11, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:20 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x403, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x80}}, 0x0)

11:19:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x4, 0x0, &(0x7f00000000c0)="0a7bbfb8"})

11:19:20 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, 0x0, 0x0)

11:19:20 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x115, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x27c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7225}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x377}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40401}, 0x20008080)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:21 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, 0x0, 0x0)

[ 3119.919896][T18771] kvm [18764]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:21 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
prctl$PR_SET_PDEATHSIG(0x1, 0x5)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x7, [0x1000, 0x6, 0x4, 0x80, 0x5, 0x1, 0x7, 0x6, 0x7, 0x4, 0x3ff, 0x7, 0x9, 0x5, 0x5cd, 0x6ebc, 0x1000, 0x0, 0x9, 0x7fff, 0x3, 0x0, 0x2, 0x6350, 0x4, 0x4, 0x6, 0x2, 0x8, 0x2, 0x9, 0x6, 0x6, 0x80, 0x3f, 0x2, 0x6, 0x3, 0x0, 0x8eb, 0x3, 0x80, 0x80, 0xbed, 0x2, 0x4, 0x7f, 0x7], 0x5})

[ 3120.408693][   T26] audit: type=1800 audit(1572088761.599:292): pid=18754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16769 res=0
11:19:21 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x1100})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9d)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x9)
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
recvmsg(r8, &(0x7f0000000140)={&(0x7f00000000c0), 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/175, 0xfffffffffffffcae}], 0x1000014c, &(0x7f0000000000)=""/27, 0x1b}, 0x40012300)
fcntl$dupfd(r5, 0x9973b4e35a6f2f39, r6)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x22)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:21 executing program 3:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, 0x0, 0x0)

11:19:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
r1 = dup2(0xffffffffffffffff, r0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r6, r7, 0x0)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r11, 0x202002)
keyctl$chown(0x4, r11, r9, r10)
r12 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r11)
keyctl$instantiate(0xc, r6, &(0x7f0000000340)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/kvm\x00', 0x20, 0x2, 0x20, [0x61, 0x66, 0x35]}, 0x38, r12)
getsockname$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000002c0)=0x3, 0x4)
recvmsg$kcm(r4, 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000440)={'filter\x00'}, &(0x7f0000000540)=0x78)
r13 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x410000, 0x86)
pipe2(&(0x7f00000001c0)={<r14=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r14, 0x0, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r14, 0xc028564e, &(0x7f0000000300)={0x0, 0x1, [0x6, 0x3, 0xe2a, 0x9, 0x0, 0xffff, 0x1000, 0x200]})
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x7, 0x7, 0x4, 0x0, {r2, r3/1000+30000}, {0x4, 0x1, 0xbc, 0x1f, 0x65, 0xe1, "fe53820d"}, 0xb5, 0x2, @fd=r13, 0x4})
r15 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r15, 0xc0cc5615, &(0x7f00000000c0)={0x8, @capture={0x1000, 0x1, {0x80000005, 0x8}, 0x9, 0x5}})
pipe2(&(0x7f00000001c0)={<r16=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r16, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r16, 0x6, 0x21, &(0x7f0000000580)="7a72f59af06dc3b2f7b8da7871ced88b", 0x10)

11:19:21 executing program 2:
mkdir(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000)
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000002c0), 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)

11:19:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xe8)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000f80)={'vcan0\x00', <r9=>r8})
r10 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r11=>0x0})
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000100)={r11, 0x1, 0x6, @remote}, 0x10)
r12 = socket(0x100000000011, 0x2, 0x0)
bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, <r13=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000000)={r13, 0x1, 0x0, @remote}, 0x10)
accept4$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14, 0x800)
r15 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r16=>0x0})
setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000000100)={r16, 0x1, 0x6, @remote}, 0x10)
r17 = socket(0x100000000011, 0x2, 0x0)
bind(r17, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, <r18=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r15, 0x107, 0x2, &(0x7f0000000000)={r18, 0x1, 0x0, @remote}, 0x10)
pipe2(&(0x7f00000001c0)={<r19=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r19, 0x0, 0x0)
getsockopt$inet_mreqn(r19, 0x0, 0x24, &(0x7f0000001140)={@remote, @initdev, <r20=>0x0}, &(0x7f0000001180)=0xc)
pipe2(&(0x7f00000001c0)={<r21=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r21, 0x0, 0x0)
getsockopt$inet_mreqn(r21, 0x0, 0x24, &(0x7f00000011c0)={@multicast1, @remote, <r22=>0x0}, &(0x7f0000001200)=0xc)
r23 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r24=>0x0})
setsockopt$packet_add_memb(r23, 0x107, 0x1, &(0x7f0000000100)={r24, 0x1, 0x6, @remote}, 0x10)
r25 = socket(0x100000000011, 0x2, 0x0)
bind(r25, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r25, &(0x7f0000000040)={0x11, 0x0, <r26=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r23, 0x107, 0x2, &(0x7f0000000000)={r26, 0x1, 0x0, @remote}, 0x10)
r27 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r27, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r28=>0x0})
setsockopt$packet_add_memb(r27, 0x107, 0x1, &(0x7f0000000100)={r28, 0x1, 0x6, @remote}, 0x10)
r29 = socket(0x100000000011, 0x2, 0x0)
bind(r29, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r29, &(0x7f0000000040)={0x11, 0x0, <r30=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r27, 0x107, 0x2, &(0x7f0000000000)={r30, 0x1, 0x0, @remote}, 0x10)
r31 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r31, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r32=>0x0})
setsockopt$packet_add_memb(r31, 0x107, 0x1, &(0x7f0000000100)={r32, 0x1, 0x6, @remote}, 0x10)
r33 = socket(0x100000000011, 0x2, 0x0)
bind(r33, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r33, &(0x7f0000000040)={0x11, 0x0, <r34=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r31, 0x107, 0x2, &(0x7f0000000000)={r34, 0x1, 0x0, @remote}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001240)={@empty, @remote}, &(0x7f0000001280)=0xc)
r35 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r35, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r36=>0x0})
setsockopt$packet_add_memb(r35, 0x107, 0x1, &(0x7f0000000100)={r36, 0x1, 0x6, @remote}, 0x10)
r37 = socket(0x100000000011, 0x2, 0x0)
bind(r37, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r37, &(0x7f0000000040)={0x11, 0x0, <r38=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r35, 0x107, 0x2, &(0x7f0000000000)={r38, 0x1, 0x0, @remote}, 0x10)
r39 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r39, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r40=>0x0})
setsockopt$packet_add_memb(r39, 0x107, 0x1, &(0x7f0000000100)={r40, 0x1, 0x6, @remote}, 0x10)
r41 = socket(0x100000000011, 0x2, 0x0)
bind(r41, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r41, &(0x7f0000000040)={0x11, 0x0, <r42=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r39, 0x107, 0x2, &(0x7f0000000000)={r42, 0x1, 0x0, @remote}, 0x10)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000012c0)=@hci={0x1f, <r43=>0x0}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)=""/137, 0x89}, {&(0x7f0000001400)=""/66, 0x42}, {&(0x7f0000001480)=""/73, 0x49}, {&(0x7f0000001500)=""/99, 0x63}], 0x4, &(0x7f00000015c0)=""/69, 0x45}, 0x100)
r44 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r44, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r45=>0x0})
setsockopt$packet_add_memb(r44, 0x107, 0x1, &(0x7f0000000100)={r45, 0x1, 0x6, @remote}, 0x10)
r46 = socket(0x100000000011, 0x2, 0x0)
bind(r46, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r46, &(0x7f0000000040)={0x11, 0x0, <r47=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r44, 0x107, 0x2, &(0x7f0000000000)={r47, 0x1, 0x0, @remote}, 0x10)
pipe2(&(0x7f00000001c0)={<r48=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r48, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r48, 0x8933, &(0x7f00000017c0)={'hwsim0\x00', <r49=>0x0})
r50 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r50, 0xae03, 0x9d)
r51 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r51, 0xae03, 0x9d)
r52 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r52, 0xae03, 0x9d)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80400200}, 0xc, &(0x7f0000002000)={&(0x7f00000048c0)=ANY=[@ANYBLOB="e8070000", @ANYRES16=r3, @ANYBLOB="000828bd7000fedbdf250000000008000100", @ANYRESOCT=r50, @ANYBLOB="f00002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008000000008000600", @ANYRES32=r13, @ANYRES64=0x0, @ANYRES32=r14, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000008000100", @ANYBLOB="5cb3b94c01456c54e9f107d1af2830177766928844afcbfa5af5fa0a770fc185876263f290e0458926b3", @ANYBLOB="7c02020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400010100004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRESOCT=r51, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffff000008000600", @ANYRES32=r30, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r52, @ANYBLOB="087957abca2f7d67914c0070c708870e41e4842a5da6000000000000003f45c3545e735866191f5f9227e70637e443542932dd1799b441ef5dc4210c161ab30599a8", @ANYRES32=r34, @ANYBLOB="e001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400b7d7b71f08000600", @ANYRESDEC=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004001f00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000090000008000600", @ANYRES32=r38, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400040000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004003f0002090100000002000001ffffffff0100030901000000000001af0900000001f006090180000009213807ff00000003000907ff0f000008000100", @ANYRES32=r42, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=r43, @ANYBLOB="e001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004004f00000008000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004000180a2998258b5c5316d1d8149040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000", @ANYRESOCT=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r49, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001004e6f746966795f70656572735f696e746d7276616c00000000000000000000000800030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000800000380001002400010068625f73746174735f726566726561469b8b1b04298876616c0000000000000008000300030000000800040001010000"], 0x29}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r53 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe2(&(0x7f00000001c0)={<r54=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r54, 0x0, 0x0)
ioctl$TIOCMIWAIT(r54, 0x545c, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000240)={0xe2f, &(0x7f0000000140)="f1ac26abb5498bbd26dc520c856c2cc23b0b55e40823c469b5c405376fb8c8608063dc677440470b2bbdf2ccd97dba479ec895a4832b93cf4834fde775caf73caa994e72acda351d75d33f9c206cf19cd644e124ec7327986aa55e976fde3befd91db80826d65536d56caefd23a89752bed1aee485fd145ddf70beada4d1fcbf7c44198cf191c2feb92df543f67bb4edeff366856096dcb69432401177c405d3795d782aa30a9a01da3b1a36c1a9fe101dcb1babfe02a14fdb05ae7aff8187cc84c95d034ccc996764af5b96ecb5c436195f5c55de529a357119e828"})
ioctl$KVM_SET_REGS(r53, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r53, 0xae80, 0x0)
ioctl$KVM_RUN(r53, 0xae80, 0x0)

[ 3120.545389][T18803] kvm [18802]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3120.574971][T18809] device lo entered promiscuous mode
11:19:21 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

[ 3120.738356][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.744210][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3120.750054][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.755819][    C1] protocol 88fb is buggy, dev hsr_slave_1
11:19:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f00000000c0)={0x9, 0xfffff800, 0x7fffffff, 'queue0\x00', 0x76})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000000)=0x54)
timerfd_create(0x5, 0x80000)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:22 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = semget$private(0x0, 0x7, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
semop(r1, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}}}, &(0x7f0000000040)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=<r5=>0x0)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f00000003c0))
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setregid(0x0, r7)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340)={{0x1, r3, r4, r5, r7, 0x4, 0x5}, 0x200, 0x8000, 0x9})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$pppoe(0x18, 0x1, 0x0)

[ 3120.924880][T18830] kvm [18828]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3120.978354][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.984475][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3120.988354][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.996000][    C1] protocol 88fb is buggy, dev hsr_slave_1
11:19:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U+', 0x100000000}, 0x28, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x240000, 0x0)
ioctl$NS_GET_PARENT(r6, 0xb702, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={<r7=>0x0, 0x81, 0x0, 0x8000, 0x10000, 0x4}, &(0x7f00000000c0)=0x14)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r7, 0xecb3}, 0x8)

11:19:22 executing program 3:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0)

[ 3121.134103][T18839] kvm [18838]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:22 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r5, 0x0, 0x80000001, 0x0)

[ 3121.202019][T18839] kvm [18838]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3121.307833][   T26] audit: type=1800 audit(1572088762.489:293): pid=18825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17419 res=0
[ 3121.330795][   T26] audit: type=1800 audit(1572088762.499:294): pid=18821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17412 res=0
[ 3121.388543][T18807] device lo left promiscuous mode
11:19:22 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0xc354007d92cb39f3}, 0x0)

[ 3121.450905][T18809] device lo entered promiscuous mode
11:19:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/41)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
r6 = perf_event_open$cgroup(&(0x7f0000000200)={0x93f025833accbccc, 0x70, 0x3, 0x1, 0x8, 0x44, 0x0, 0x4, 0x200, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x4224, 0x5, 0xffffffff, 0x5, 0x7, 0x6, 0x8}, r5, 0xb, r4, 0x4)
fcntl$dupfd(r2, 0x0, r6)

11:19:22 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x1200})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3121.553604][T18860] kvm [18859]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:22 executing program 2:
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
pipe(0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000b00000000000000000000000100180000000000030006000000000002000000e0000001000000000000000002000100000000000000000000000000030005000000000002000000e00000010000000000000000d3d0760ca7773a0fd0e0e2cd7a56134cca35b149c3b5af905e46a9d3aa38ec09ee558f5bda28a8af0504d256e8d8b768c854d558f5423c4d0b3fa799cf3dd609d556e7"], 0x58}}, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)

[ 3121.991176][   T26] audit: type=1800 audit(1572088763.179:295): pid=18867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17412 res=0
[ 3122.018348][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3122.024133][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3122.288518][T18807] device lo left promiscuous mode
11:19:23 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x62, 0x8, &(0x7f00000001c0)="9d2c3221b1d00c0d014c1e93e2e085e81917096b759018aa1e5ae992cf17ef2fe558f4cd6e843a383a736e64c3f228e2eb94e5230b090eff331eb5d7701e396520689170f83c", {0xe59, 0x8, 0x41414770, 0x4, 0xad, 0x4, 0x1be1af2b396f4b78}})

11:19:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
sendmsg$nfc_llcp(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x4, 0x1e, 0x1, "23c2d0b0f91339483cf67999e8508d641f1ab9d530d228b83265048adfe2bf0074eceefb6df6785041c740086d3b8ea492140e9813244a67918bf634155d5b", 0x31}, 0x60, &(0x7f0000000140)=[{&(0x7f00000001c0)="83a05411e58a35055f4fe3cdfdcd29cd5b259f6192f5877921a64c41b0839ad0bec5172bee3a9f215f45192400048510b1c7c0f1b66d6d2b2f078443b39f1081a5bfeb972be927c2d3438f41398c0fdd38250f012200f5249bb093464b02c9c048697cdd9e485a753d344ae42f2b381f341cb0ff7db16698857496d391db2bbf6385c76cac29104b2f746eedc07a11757c8b9fdde9e634e3bb5f52ae7333ac07ecc819e0d0bd1b0416b02e706d75de71d2f61473239f71e36a915b39cf6ebbcd264b16632d3c5e8d81becbc7c2f9", 0xce}, {&(0x7f00000002c0)="965aee023ccc0d9faf8c5bce5cf5400e57ed232b8b22bf86df9a4aa8afae056f2acd1d74c443514933905d5740e8124fe0532ca1074474088ea88f2bdfd997febbcef76c7584bb45b0cf91cc5727cb0b61000112433983bba3dd17714dcb8729b4c31ed62fe26c91076a014881abf0702706bd7052966b71a2c2d6f41129aba798c48b75b4daebea8334c1a1", 0x8c}, {}], 0x3, 0x0, 0x0, 0x2000001}, 0x4000080)

11:19:23 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x2500})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000015000/0x1000)=nil})

11:19:23 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x8, @output={0x3800, 0x0, {0x6, 0x4}, 0x3, 0x6531}})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3, @ipv4={[], [], @multicast2}, 0x1}, @in={0x2, 0x4e23, @remote}], 0x2c)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x1ff)

[ 3122.525147][T18892] kvm [18887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3122.599381][T18899] kvm [18887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f00000000c0)=""/159)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000000)=0x4, 0x4)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x90, 0x40000022], [0xc1]})

[ 3123.030681][   T26] audit: type=1800 audit(1572088764.219:296): pid=18898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17318 res=0
11:19:25 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
fsync(0xffffffffffffffff)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
stat(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11:19:25 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202000, 0x40)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x3f, 0x4)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x80000008, 0x7, 0x0, 0x1, 0x51c, 0x0, 0x5}, {0x1, 0x2, 0x7e9875c04599fde6, 0xffff, 0x71d0, 0x2, 0xf8d}, {0x2, 0x9, 0x0, 0x7, 0x3, 0x2, 0x4}, {0x80000007, 0x7, 0x2, 0x200, 0x4, 0x6, 0xfffff8b4}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0xe54a, 0x0, 0x9]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:25 executing program 2:
getpid()
fsync(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="850000002e0000001e"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

11:19:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
write$eventfd(r4, &(0x7f0000000000)=0x1, 0x8)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xf)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x40)
getpeername$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
keyctl$chown(0x4, r7, r8, 0x0)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:25 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x4000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:25 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ftruncate(r0, 0x0)

11:19:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:25 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf763970c20c8ca4d, &(0x7f0000000040)=0x32, 0xffffffffffffffb1)
clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x80, 0x5)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x80)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0)
fcntl$setstatus(r1, 0x4, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r4, &(0x7f0000000880), 0x4000224, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x80005)
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)

11:19:25 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x408080, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/71)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x80000, 0x0)

[ 3124.664726][T18947] kvm [18944]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:26 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x1, @output={0x2000, 0x1, {0x21a466f0, 0x9}, 0x1f, 0x40}})
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote={[], 0x0}, 0xb, 'gre0\x00'})

11:19:26 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
fsync(0xffffffffffffffff)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
stat(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11:19:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f00000000c0)={0x0, 0xec04, 0x2d73})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2000, 0x0)
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x0, @remote}, 0x10)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@mcast2, r6}, 0x14)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x1})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

11:19:26 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xc})

11:19:26 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={<r2=>0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x8, 0x5, 0x1, 0xffffffff, 0x5, 0x4, 0x895, 0x200, 0x8000000000000, 0x5, 0x63, 0x1, 0x258, 0x0, 0x7]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r2, 0x80000001, 0x4, 0xffffffff}, &(0x7f00000002c0)=0x10)

[ 3125.320428][T18990] kvm [18987]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3125.345797][T18992] device lo entered promiscuous mode
11:19:26 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x5c00})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
write$binfmt_elf32(r4, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5b, 0x40, 0x0, 0xb3, 0x400, 0x3, 0x6, 0x7fffffff, 0x3c7, 0x38, 0x153, 0x1f7, 0x5, 0x20, 0x1, 0x6, 0x4f8, 0xded}, [{0x4, 0x8, 0x9, 0x6, 0x1f, 0x3f, 0xfffffff9, 0x46ca}], "2c6b80fe9b002707effbbf419a1e93bf99b3106b81281388f8acf9f45ff47cf707df3b502ebe18e26d072f25f0199ca221aa6ea0e3d6031839a72e8af49148ba287bae2cb9375097bc9bb91922acfec8a8e0af846bf90f0906bfdbd39032b16859051296269d5ca4892618b287429e5e70bf2f5d4463908e42e73c5cfa3d03a76182e63c8a193e52ccc32d64c7b0da4407a31849b09c8906a06603873108590faa9fd5b281eda0b2564b05111deed60e5851581d6b905f7c5271d79204005afd83dfa0024f66e7905b", [[], [], [], [], [], []]}, 0x721)
ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x4005, 0x2, 0x3, 0x5})
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:26 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={<r3=>0x0, 0x7fff}, &(0x7f0000000080)=0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000280)={'nr0\x00', 0x2})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x6, 0x0, 0x0, 0x9, 0x7fff, 0x8, 0x1, r3}, &(0x7f0000000200)=0x20)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3125.490002][T18991] device lo left promiscuous mode
11:19:26 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x100000006, 0x0, 0x0, 0x50000}]})
sendmmsg$unix(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x40000)

[ 3125.591518][T19010] kvm [19007]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3125.646230][T18992] device lo entered promiscuous mode
11:19:26 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0xa)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40050767c00000000000061117400000000008532000002000000850000000000070095000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080))
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4)
ioctl$USBDEVFS_GET_SPEED(r3, 0x551f)
ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000200)={@default, @default})

[ 3125.768827][T18991] device lo left promiscuous mode
11:19:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x5, 0xfffffffffffffffc], [0xc1]})

11:19:27 executing program 4:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x3, 0x1, 0x3, 0x1ff}, {0x0, 0x2, 0x81, 0x93}, {0xb890, 0x0, 0xff, 0x80000000}, {0x100, 0x7, 0x20, 0x800}, {0x0, 0x1, 0x9, 0x8}, {0x5, 0x1, 0x4, 0x80000001}, {0x2, 0x0, 0xfd, 0x7}, {0x4, 0xff, 0xa6}, {0x7, 0x7, 0x1, 0x8}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
fcntl$setpipe(r1, 0x407, 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {}, {0x0, 0xf37, 0x3f, 0x0, 0x0, 0x0, 0x3}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x40)
r5 = msgget$private(0x0, 0x10)
msgctl$IPC_RMID(r5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000240)={{0x6, 0x7f, 0x40, 0x3, 0x9a, 0x81}, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:27 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x6}, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x1000, 0x0)
fsync(r5)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:19:27 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000400)=0x2)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)=':dev/ion\x00', 0x303000, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
ioctl$int_in(r2, 0x80006080045002, &(0x7f0000000040))
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0xa, 0x0, r2})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0)
ioctl$EVIOCGUNIQ(r3, 0x80404508, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xffffffff00000001, 0x200c80)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000340)=""/71)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000000c0)={0x1, {r5, r6+30000000}, 0x7f, 0x5})
r7 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x200, 0x6}}, 0x20)
sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {<r8=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000c00)={r8, 0x3})
r9 = getpgrp(0x0)
setpriority(0x0, r9, 0xffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)={0x5})
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x801402}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x3568b8b7a1281ec4}, 0x800)
syz_extract_tcp_res(&(0x7f0000000100), 0x0, 0x3)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000dc0)='\x00\x00\x00\xf6\xff\x00\x12\x00Io\xa9\x03\xea~\xaceh\xad\xc1\xd6\x9c\xe9\xad\xa8W[/\xe0\xd7j\x06\x00\x00\x00\x00h\xaa(\x12Z\x0f\xd8$\xa0\x81ilWg\xaaO-\xc3\x82\x9f\xf2\x02\x00\x9fD\x9cg:\xd1\x8cB=\x81\xe8\x17.\xea\xd8\x11\xc2\xd8}\x9f?\x9fi\xec\xbd\xc6W\xc6\xdc\xdd\aU\xd0C^t\x01$}@*\x9d>\xc9\x18H\xafA\xa8\x80\xe9\xf0A\xcb\x103\x11)\xf7\a\xcc}\x1aKB\xbf\xc5\xb4O\xf2\x05\x01\xfb\xfd\x94\xfa@i4\xaf\xc8[\x06}\xb7\x90Uj\x83\x17\x7f\xe7', &(0x7f0000000300)='vmnet1&vmnet1lo{eth1${!!\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='\t\x00'])

11:19:27 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8)
write$FUSE_DIRENT(r2, &(0x7f00000002c0)={0x60, 0x53850ed7a538fc, 0x4, [{0x4, 0x101, 0xc, 0x1, '/dev/video#\x00'}, {0x6, 0x9, 0xc, 0xfffffff9, '/dev/video#\x00'}]}, 0x60)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @null, r3})

11:19:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r4=>0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002)
io_submit(r4, 0x400000a1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x81800}])
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000180)={{0x9b, 0x2, 0x5, 0x81, 0x4}, 0x7fff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x4000)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x200, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x5, 0x8, 0x7ff, 0x80000000]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x20, 0x1, 0x8001]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x401, 0x7f]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x10)

[ 3126.392694][T19059] kvm [19054]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:27 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x1000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:27 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0xa, 0x3, "f70193a4d32b6224a33c14540208bc3e2e3ced545cde5bdb8ed6d01d286c57f9", 0x4745504a})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0x0, 0xe8, 0xe8, 0xe8, 0x1e0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000080), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'nr0\x00', {0x101}, {0x1fe}, 0x0, 0x4, 0x44}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x5, 0x5, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x1, 0x1, [0x2e, 0x3f, 0x28, 0x2, 0x3, 0x23, 0x15, 0x36, 0x1b, 0x15, 0x2b, 0x33, 0x11, 0x16, 0x20, 0x27], 0x0, 0x1f}}}, {{@ip={@empty, @local, 0x0, 0xffffffff, 'bcsh0\x00', 'lo\x00', {0xff}, {}, 0x21, 0x0, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x61863d384183bbe8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

11:19:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x80000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x9, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'lapb0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11:19:27 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x5)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:28 executing program 2:

11:19:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1, 0x1, 0x40000022, 0x5], [0xc1]})

11:19:28 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080))

11:19:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfff7fffffffffffd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x0, 0x0, 0x40000022], [0xc1]})

11:19:28 executing program 2:

11:19:28 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
bind$netrom(r0, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:28 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x6}, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x1000, 0x0)
fsync(r5)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:19:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = gettid()
tkill(r2, 0x2e)
r3 = getpgid(r2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000340)={0x3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f00000004c0)="660f3838990000b8e9000f00d86766c7442400040000006766c7442402000000006766c744240600000000670f011c24ba6100ec0f01b08539baa00066b80000008066ef66b97902000066b8e627000066ba000000000f30650f01ca36f4d8818889"}], 0x1, 0x38, 0x0, 0xfffffffffffffe4b)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
bind(r4, &(0x7f00000001c0)=@nfc={0x27, 0x1, 0x0, 0x1}, 0x80)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$KDDELIO(r7, 0x4b35, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet6_dccp_buf(r5, 0x21, 0x1361fb638f20c6e8, &(0x7f00000000c0)="5afff004a8cf132530f043d31a1923ac387b3e3aafc76e01e603b81854f38e0b98ef7ed179e9e58a1e7b93ad34440ec516e2799a42684b15b787e46737dc2e34d34d54a2ad6058a9cd968d3f8b3591d1a3a96ed3dda7250778ab12dc220a19388594039ec01317d4be44e72522d9a7374ad2f4", 0x73)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x80})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4c6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400000]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r8 = fcntl$dupfd(r4, 0x80c, r4)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r9, 0x2)
pipe2(&(0x7f00000001c0)={<r10=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r10, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x8001, @remote, 0x101}, @in={0x2, 0x4e21, @rand_addr=0x10000}], 0x4c)

11:19:28 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x2000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:28 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x6}, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x1000, 0x0)
fsync(r5)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:19:28 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='environ\x00')
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000240)={0x9, 0x1ff, 0xc4e, 0x62, 0x3, 0x3})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x8000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x2, 0x8)
r3 = socket(0x15, 0x4, 0x28)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x600, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x40001, 0x100)
getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000080), &(0x7f0000000300)=0x4)

11:19:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:28 executing program 0:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x2, 0x40, 0x1, 0xc0, 0x6}}, 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:28 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/\x84ev/wi\x8a\rk@\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x3})

11:19:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000000)=0x3f, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f00000001c0)={<r5=>0x0, <r6=>0x0})
rt_sigtimedwait(&(0x7f00000000c0)={0x100000000}, &(0x7f0000000100), &(0x7f0000000200)={r5, r6+30000000}, 0x8)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:29 executing program 3:

11:19:29 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0))
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0x100, "abaf204d7d95066807ef8e7c2dc9eed692775e54d4cc467dfb94189cb892ac87", 0x0, 0x20, 0x800, 0x80000001, 0xebfcf4c1898864dc, 0x3, 0xea, 0x614})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40a183, 0x0)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xcdcbb)
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x6, 0x32314142, 0x71cd5abd54c13c37, @discrete={0x1, 0x800}})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @dev={[], 0x2a}, 'ip6erspan0\x00'}})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000001c0)={0x2, 0x5, 0x1, 0x4, 'syz1\x00', 0x2})

11:19:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x4cb], 0x0, 0x200})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:29 executing program 3:

[ 3128.116039][T19168] kvm [19159]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:29 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xade1, 0x0)
ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0x0, "414122af87effc6ac1494a8b69fc60d8f9d0d3d52c04759d57fbea259181f770", 0x2, 0x1})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved})

[ 3128.589089][   T26] audit: type=1800 audit(1572088769.779:297): pid=19149 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=16755 res=0
[ 3128.609905][   T26] audit: type=1800 audit(1572088769.799:298): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16610 res=0
11:19:29 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x3000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:29 executing program 3:

11:19:29 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x10000120, 0x3cec11fffe4fef91}}], 0x1c)
shutdown(r3, 0x2)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={<r8=>r7, @in6={{0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}, &(0x7f00000002c0)=0x84)
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x7, 0x0, [], {0x0, @reserved}})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8, 0x80000003}, 0x8)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000001c0)={'rose0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="3b0000000100000006000000534a00007233b9197155ba7219e14ccbe8a7a21f46c4509f8aa594509e64fd42be98d7b9244d073e56b353ddc698fdaaf6ae88fa6e43c8ba6e4dab3cb8239c938bb136b140972bc6ed7cd36bf490ee3922da84236788"]})
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000400)=0x1, 0x4)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x9d)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040))
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:29 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000180)={0x0, "88292d3094f1549fc3c4e955039dd9ab44fcb63e899b526f9f66a4000f70e75b"})
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x6}, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x1000, 0x0)
fsync(r5)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11:19:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x400)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x1700c, &(0x7f0000000140), 0x5, r4, 0x8})

11:19:29 executing program 3:

11:19:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000100))

11:19:30 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8271b971cbbf5c17, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x2})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:30 executing program 3:

11:19:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10fc6a7890000007e7eba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008eaf0f011c2666b8bf008ee0", 0x49}], 0xaaaaaaaaaaaaadf, 0x78, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x28400, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e730000000], 0x1000})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:30 executing program 3:

11:19:30 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x1, {}, 0x4}})

[ 3129.123535][T19220] kvm [19217]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3129.554417][   T26] audit: type=1800 audit(1572088770.739:299): pid=19202 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16807 res=0
11:19:30 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x4000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:30 executing program 3:

11:19:30 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000380))
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
r7 = gettid()
tkill(r7, 0x2e)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000004c0)={{0x3, 0x4, 0x5, 0xea55, 'syz0\x00', 0x8}, 0x2, 0x8, 0x0, r7, 0x2, 0x6, 'syz1\x00', &(0x7f00000002c0)=['/dev/autofs\x00', 'cpuset(self\x00'], 0x18, [], [0x6, 0x1, 0xf801, 0xfffa]})
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r8, 0x81ab}, &(0x7f0000000340)=0x8)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)=<r9=>0x0)
ptrace$cont(0x7, r9, 0x3ff, 0xbf9)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0x4, @capture={0x1000, 0x1, {0x8, 0x1a65}, 0x0, 0x800}})

11:19:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x6, 0x1000040000025, 0x10], [0xc1]})

11:19:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f00000001c0)="ba2000b000ee0f01c366b8000000000f1723d0d021f866350000000a0f23f866b95e0a00000f20d86635200000000f22d866ba000000002ef30f5a87f6ae0f01c90f20830f0b0f20e06635000020000f22e00f0f6e0b900f20e06635400000000f20e0", 0x63}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:30 executing program 2:

11:19:30 executing program 2:

11:19:30 executing program 3:

11:19:31 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x83, 0x0)
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080))

11:19:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
prctl$PR_GET_SECUREBITS(0x1b)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x0, 0x5, [0x140, 0x1000, 0x1ff], [0xc1]})

11:19:31 executing program 3:

11:19:31 executing program 2:

[ 3130.261103][   T26] audit: type=1800 audit(1572088771.449:300): pid=19255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16946 res=0
11:19:31 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x5000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:31 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
bind$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r2 = syz_open_dev$adsp(&(0x7f0000000700)='/dev/adsp#\x00', 0x4, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000740)=0x2ea50ad2ec774ae2)
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='.\x00', 0x7, 0x2, &(0x7f0000000380)=[{&(0x7f0000000240)="76e90868335b665ced06142a52d0e165c3e22b68a006b9bb62fa2b34021ad7af4d3fe8dfdd78990e2d17ffdbe54a030982d5376a1a5210102e7cfb3819c3960fc7c689a09d769b25a91232dd13a8b78943f676c6f074842a7857decb8f5cad75e3ef8f67bcddf856b31ed29dae3e50b234194218f7a01e279bfffd93d98dd266015fa571ec3743d69a970fd7ca6af5d308b03597d8123a6edd257b4021159b95ab1743365d3ddf4615906428fb1953607b71e51cc618beb3a59f", 0xba, 0x1}, {&(0x7f0000000300)="2bdc33ffd8a4a207c61dc062dbf45e4889dd9fc545bce1e70c708285746f0d614d8a46ef4176ea6aef59110c096f2c5293afdfc48d12841a085eaafb869d70e429d465b96cf7b87ab73718455c71012a40192c6f406470471d8166b625faef21070057539554dec882387ae765a252", 0x6f, 0x9}], 0xa04, &(0x7f0000000500)=ANY=[@ANYBLOB='shortname=mixed,shortname=winnt,iocharset=maccyrillic,rodir,shortname=win95,tz=UTC,shortname=win95,shortname=win95,mask=^MAY_WRITE,uid=', @ANYRESDEC=r3, @ANYBLOB="2c736d61636b66737472616e736d7574653d70726f636367726f75706c6f6d643573756d2f76626f786e65113eb7b7743173656c662f76626f786e65743076626f786e657430"])

11:19:31 executing program 3:

11:19:31 executing program 2:

11:19:31 executing program 4:

11:19:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
move_mount(r5, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x2)

11:19:31 executing program 2:

[ 3130.379073][T19284] kvm [19281]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:31 executing program 3:

11:19:31 executing program 4:

[ 3130.424622][T19285] FAT-fs (loop1): Unrecognized mount option "mask=^MAY_WRITE" or missing value
11:19:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2040, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000140)=0x100)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x2e, @multicast1, 0x4e21, 0x0, 'sh\x00', 0x21, 0x1d0, 0x3}, {@local, 0x4e22, 0x4, 0x7, 0x8, 0x5}}, 0x44)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0xfffffffffffffffc, 0x40000022], [0xc1]})

11:19:31 executing program 4:

11:19:31 executing program 2:

[ 3130.546136][T19298] FAT-fs (loop1): Unrecognized mount option "mask=^MAY_WRITE" or missing value
[ 3130.676866][T19306] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001
[ 3130.932072][   T26] audit: type=1800 audit(1572088772.119:301): pid=19289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17327 res=0
11:19:32 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x6000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:32 executing program 4:

11:19:32 executing program 2:

11:19:32 executing program 3:

11:19:32 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dew/kvm\x00', 0x44000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xd2, 0x2, 0xf03c})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r5=>r4})
bind$isdn(r5, &(0x7f0000000000)={0x22, 0xfa, 0x9, 0x81, 0x9}, 0xffffffffffffff93)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0xd19e8ddd26e2c970, 0x5, [0x140, 0x0, 0x4], [0xc1]})

11:19:32 executing program 2:

11:19:32 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/des/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x3, 0x9, 0x4, {0xa, @sdr={0x34424752, 0xf461}}})
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xfff, 0x81, 0x1, 0x6, 0x2f, 0x20, 0x87, 0x7f, 0x20, 0xb8, 0x2, 0x1, 0x8c}, {0x7, 0x20, 0x3, 0xdd, 0x1f, 0x3, 0x3, 0x0, 0x80, 0x0, 0x7, 0x20, 0x9}, {0x1, 0x859, 0xe, 0xce, 0x0, 0x1, 0x80, 0x4, 0x1, 0x0, 0x8, 0x8, 0x1f}], 0x5})

11:19:32 executing program 4:

11:19:32 executing program 3:

11:19:32 executing program 2:

11:19:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x5, [0x13f, 0xfffffffffffffffe, 0x40000025, 0x100000000000000], [0xc1]})

[ 3131.594554][   T26] audit: type=1800 audit(1572088772.779:302): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17009 res=0
11:19:32 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080))
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:32 executing program 3:

11:19:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, 0x0)

11:19:32 executing program 4:
semop(0x0, &(0x7f0000000000)=[{0x0, 0xb3a6}], 0x1)
semop(0x0, 0x0, 0x0)
semctl$GETNCNT(0x0, 0x3, 0xe, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x45800)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r1, 0x0, r2, 0x0, 0x100000000000a, 0x0)
r3 = accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0xfc44, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00')
sendfile(0xffffffffffffffff, r4, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
fchdir(r5)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000240)={0x80000000, 0x4, 0x80000000, 0x100}, 0x10)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
syz_emit_ethernet(0x90, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000010800450400820000000000009078ac1414bbac1e00004e244e21006e907842020000c0000000824a8000800000000101000122040001800000002240000180000000a20580c3000000001f7dd67891b224f2050da2dcb8742e2b20d9371e3b3b15003f0be1e05c71eacccd341188510c447fcb4b72e1c1c1905185aaac00000000000000"], 0x0)
ioctl$sock_proto_private(r3, 0x89e9, &(0x7f00000001c0)="6cb2684f8b2163d5b6405160f941ca35a1521d")
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f00000000c0))

11:19:32 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x7000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x94ef3dfba2cb8fe5, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:32 executing program 3:
socket$inet6(0xa, 0x100000000000001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x233, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

11:19:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0)
r1 = creat(0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d9189)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000003c0)={0x4005, 0x3})
ptrace(0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x0, 0x0, 0x8, 0x40, 0xfffff5f0, 0x2}}, 0x12)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x0, 0x0, 0x1}}}, 0x28)
r3 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5", 0x5d, 0xfffffffffffffffc)
keyctl$read(0xb, r3, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000280)='dns_resolver\x00', 0x0, r3)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000140)='sq\"\"#\xa6\xf0(\x12\xac\xbfje\x96\x89% \x8ect\x01\x00\x00\x00\x00\x00\x00\x00_dev\x17p\xf2v\xc8\r\xdb\a3x\xfc\xbbL\xb0\x8d\x95\xc8Sf\xf2Sx\xf4X8\xfbYs\x84\x02.~\x0f\x1b+\xbd\xd5r\xbb\x80\xa0\xff\xd9\x8e\xe4f%\x83\x8e\xda\xb9\xf0\x91\x9fJ\x96W\x89\x9b\x0e4\x05\xaa[\xe2\xf6\xb0m\x86~%o\n\x82\x95\xf7\r\x8e\xb0\x81\x98/\xac?\xdc:\xba\x90\xbd\xc5b\xd6\xad\xd6\xdf\x9c\xda\xf8\xc4n\xf0L\x886\xd4\x89\xd8\x17\xec\xf4\xfa|< [t\xbb/E\x9a\x94o.\xb6\xeb`\x80I\xc9\'?[av\xce\xbd\xbe\x0fN~\x04G\x9e\xd5O\xe6\a\xe3(f\x7fKb\xb2\x11t\x1d\xa3\x04\x00\x00\x00v\xce\xbf\x8e\xf8\x8a\xe8\xf3\x9d-TC\x84eA\xe7\xe1a\xb8\xcf\xf3(9\xbdkX\xb7N\xc4\x8e\xb5\xa9\xf3us\x0e\xe38<D\xce5\xfb', 0xff3e, 0x0)

11:19:32 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x1, {0x5}, 0x0, 0xfffffffe}})
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000680)={0x1, 0x1, 0x2, "d63eb57c1f6d10a1da047b74a5eb233fd55df632777d50c5f15bf02f70381979", 0x51424752})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"86ca5166b6e3d494f93339faa209f09de0a3ab101547ce89f3781b0ac884ee5e1ffbd978485d988096baed13c19448217dc466d31a77bf166bbdc813fa543c3cd014c89584c6258fdc0c53291a9918fda4c7efe2869a43859be61c6119f206fc07a0a711eee3136bb1e068c12e2028988050700dba9105556adc8d3415c92fdbc0d25687d815a8b06bf4f82888be623dae89d38c300e99459918987d031ea6f22e7295210b4d117a938ea9f760e71a1a98bcf72c6358397052b4c7139352762bdbc78e02d44f8bf4af6c2b7327730d86d8819372547248a84bae6e11587638df4fd7e287b2e3d800af94a4ffa5344931bdc054965aecf77397f999b1d1f7947594f082d53d2efa13129b957c04408bc29485907632fd8468931ff9b8d7235c4fa69726183c2bc29394112276cff7d8644e3e1876aa16c27404c1ca43c8b8626add61d83c48bd12c0af55789f5570a4c93528a81647510b312ab4748e824ce956f37323553bd26226c3b5210ce8d2697b99ee3ecccccf84e8b2b920fb378387a184d864f4da9d6754080b6629d23a9ca4d7223cb98250b6803c139c8c91f46644830df3431bf80d338649d03f7a713a47c81bbf88d5c621146363140aeaead58a5ed840a1e4518b38c304f953ab3151c2207e01297d37357bae8918d58e8ec828122052b8b7ed7f053fc02f55095c8b4aac735ee32eaf59dfb41fb4b72120b6cb701a259390d4540fcd91bfecd2a380cfa1813ab8cb3c6057191fa876c3a6346f3e27d2022cd01be1029e1869e12dd6a3eca071fa911eaf85c54f7ff3041bd75ff3048f513a52043d8d5dbdabb7b7ab02b0150658662b44c2bf57f9ff3a01972a93868f5ffa1be5056563af179873e9c9f99e83399d0a5b569fdfbfea90d73188767367862965501ba39fcde2907fa40565eaab7e6c9ab4d312d01f607d0e776db8a0b7c07fa8e0938c8f3cb726a9f20b0b72ef7add5f7da919a2abe932816d42e8702dae6ce931d2f4cb25432a128356dacfe6fa32eaa6f61450390e1cda0d11947706d93e26e7a070a6b1a094f0cc76b2e6ad82c65132181dd83e3374b04fbabd41956a303f29ed6d5d16149f3c3b4f87684688ecc944a7c494a5523f49ce5b962f840f0857310fc44592cfead02c0cf1d19926747479668f71af71df190d257acf2824dd6a1e5f19694e25274e4c9520479aea3e32c59c37270e8fa34b2d40f233ea4387603f575d55d3fe3fc5c32baf23fcc15c7f8479245e1c863bf4c290601fb6bf645f9df067c1558fe1693b80c78eea129debda55dc6de3959af2ea82663d27f43c7e5a64288b6f75d121d7ac9661b7ff118bd90a47011ebe030f00e57e2fc72b4c4085405e3baf93bc9bfd0730263cfa7df1d2e48c15c75cc7b1b4082e3ec3c1989a3eae017a7a0b49b97fe434d030882af4a724b30d324295fb354f"})
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x7, 0x21, 0x1}, 0x7)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000700)={0xe8be, 0x6, 0x1, "3942d4b1e2b7b8b28f9964aa6afd8ed5b33cbaf06cf570cbb3c481ffe134aed9", 0x44503cd0})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
epoll_wait(r1, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7ff)

11:19:33 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x143, 0x0, 0x40000022], [0xc1]})

11:19:33 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RLERROR(r1, 0x0, 0x1ea233)

11:19:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)={0x2, "3af8"}, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:33 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0x100)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x100)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/32)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x2, {0x17, 0x3ff, 0x0, 0x946}})
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000200)={0xa, @raw_data="c6702dd8bb0a622702f89c2c13df01ab17903038ae7405d476832982af84e5c9c3256ec1633baa9850c680f3a9a709856bc546228a82231bbac67891ef5b60fa72a998c131d24671882b76cfa7c3c79c57957b198ac6c767eb4b57a82a035fc3500fe06ffe866dc18a5640a889fcf3d6c9918baf267ef8ed64a9acf859e1447000a6810dfd0564a802cc4a700882f7416003917d3f699185fc811f91186c8cdf20757a906f78b15f8d2adefbc41fa82202cce45e74aae4c0953f0c7e43cb248e7d5eca739224c858"})

11:19:33 executing program 2:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x3, 0x1, 0x3, 0x1ff}, {0x0, 0x2, 0x81, 0x93}, {0xb890, 0x0, 0xff, 0x80000000}, {0x100, 0x7, 0x20, 0x800}, {0x0, 0x1, 0x9, 0x8}, {0x5, 0x1, 0x4, 0x80000001}, {0x2, 0x0, 0xfd, 0x7}, {0x4, 0xff, 0xa6}, {0x7, 0x7, 0x1, 0x8}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
fcntl$setpipe(r1, 0x407, 0x5)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {}, {0x0, 0xf37, 0x3f, 0x0, 0x0, 0x0, 0x3}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x40)
r5 = msgget$private(0x0, 0x10)
msgctl$IPC_RMID(r5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000240)={{0x6, 0x7f, 0x40, 0x3, 0x9a, 0x81}, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:33 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xa, @output={0x0, 0x0, {0x23f782fd, 0x1}, 0x200, 0x1}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x89, 0xa1, &(0x7f0000000040)="552fa83309f8aaaf41a923d127dedb40fba3599cfbab9fa675738142d58f63c6d4b34c66157c133fc94d50d6886449402b70f2d8cbdd1a4647c6d57228d0c72a4cd505c9cf674f339fe93ee956ab85a8b7a03caee3c3fd6bd2aa4f418a5db99166087e951b047769e1b05b6bc4877249d9d044efdbe9963bc853af5a69a72e7a24101a4f9a9c2b8103", &(0x7f0000000100)=""/161, 0xae, 0x0, 0x65, 0x54, &(0x7f00000002c0)="dfdbaef4889c2358041e6cb78ba63707fc438c694c82bb89545a4d00bfe8b7653b7a56fe20702d656541e57c22b127c38cea6fcf992b9e1c474daea44e9e9977625e00208ba9a26b8078f7943283f43a83a7ee383ddcf0683ee26fbbd0872f4a84fe1b8c6e", &(0x7f0000000340)="b8f49f5f7aead27e60d8d8c8118cd592df47680c7fb258b7efc26ed5af6a860cd2762b067b97024304310b6cbc950bc5f9aa1e8c4d443cc2757685e8620e82a8ced5d16ca13f999b937a72dbc2df6038f038b376"}, 0x40)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
connect$l2tp(r1, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21}, 0x2, 0x1, 0x2, 0x2}}, 0x26)

[ 3132.188015][T19403] kvm [19400]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3132.530575][   T26] audit: type=1800 audit(1572088773.719:303): pid=19376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17601 res=0
11:19:33 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:33 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @identifier="55fef030e4f90af94c3fd2280ddfc883"}})

11:19:33 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x1, @output={0x2000, 0x1, {0x21a466f0, 0x9}, 0x1f, 0x40}})
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote={[], 0x0}, 0xb, 'gre0\x00'})

11:19:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x40000)
write$tun(r2, &(0x7f00000005c0)={@void, @val={0x1, 0x80, 0x9aaf, 0x7, 0x1, 0x9}, @ipv6={0x0, 0x6, "65120a", 0x112, 0x3b, 0x9, @rand_addr="4f254a9b1d73bf3c6fab7628fe7f1063", @loopback, {[@fragment={0x4, 0x0, 0x2, 0x1, 0x0, 0x5, 0x64}, @srh={0x6, 0x1, 0x4, 0x235, 0x80, 0x20, 0x8, [@local]}], @udp={0x4e24, 0x4e24, 0xf2, 0x0, [@guehdr={0x1, 0x0, 0x0, 0xcf, 0x100}, @guehdr={0x0, 0x1, 0x0, 0x6, 0x100}], "ca51456944497f870cc95085f1379a95e2293137260f056b1934e69958567870c4354e8d7408cb65627e67b502589aedd435a333dcb14b1007745926e38481fbf97f1cee1ed3b5e4f7c720aa08b7dcf5d9da089d9b5ff50158e27768c74993d37d0510e3f55801c495fa784070b84e1e5eeae148db1141d7d39be5eb5d88f2a5471c27e216d64d87caee66fc677265283f81614d0d26b649bb03f2691bf8be0c1a85281312fb0bc511b86bddd0221bad6de8033f3714ba95d85cc315b12b8211caeb9a395e3c8b53b3844b724159c496ad70725038845784c62a58aefe65575ff5c9"}}}}, 0x148)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000200))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:19:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f00000001c0)=0xfffffff7, 0x4)
r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
r7 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r8=>0x0})
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r10=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000340)="0f221ab8030000000f23c80f21f835000070000f23f8c4e123c2fe0d0f09440f20c0350c000000440f22c0b93d080000b800000000ba000000000f30b89652ade20f23c80f21f8350800f0000f23f8c4c1ffe6b5d37fbfaa260f01c2b9170a0000b800000080ba000000000f30", 0x6d}], 0x1, 0x40, &(0x7f0000000400)=[@flags={0x3, 0x44004}, @cstype3={0x5, 0x1}], 0x2)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @remote}, 0x10)
r11 = socket(0x100000000011, 0x2, 0x0)
bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
pipe2(&(0x7f00000001c0)={<r12=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r12, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r13=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000000)={r13, 0x1, 0x0, @remote}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xe}, @empty, @mcast2, 0x0, 0x94, 0x800, 0x100, 0x100000001, 0x20, r13})

11:19:33 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:33 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)={0x3800000, 0x6, 0x4, 0x1100, {r2, r3/1000+10000}, {0x4, 0x0, 0x1f, 0xbc, 0x1f, 0x1, "a24a24b3"}, 0x7, 0x2, @planes=&(0x7f00000001c0)={0x8ae, 0x4, @userptr=0xc0, 0xfffffffa}, 0x4})
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4)
ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x1000, 0x0, {0x44, 0x9d}, 0x2}})

11:19:33 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x1, @output={0x2000, 0x1, {0x21a466f0, 0x9}, 0x1f, 0x40}})
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote={[], 0x0}, 0xb, 'gre0\x00'})

[ 3132.795785][T19438] kvm [19434]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:34 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x2, 0x2)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x0)
recvfrom$inet6(r1, &(0x7f0000000300)=""/233, 0xe9, 0x10100, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty}, 0x1c)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x0, 0x0, 0x1, 0x3, "18cd1bac63b7c7728e4e701b9d05cf6e4242be3666582588e1bbadcf6aa20bbb64e620d369127faed026bb1f5dac9615510c097c06becf25423e1581c7c667977f8c0aa6030c266c4e38fc2a083a9ca7a7d4c2f5956e202952326f58d2e497824405bb424d2a68a1a14cca9a14e0f13486fef510218e4170fb5c66c4db209cd7361957adb1d54780f365e28ae0de42838009d5a4d1231e3ea5356ad54ac73885ab7396caf8cba6428a03394f94081f04e3cc07a883b701ad63c7"}, 0xca)

[ 3132.882082][T19438] device lo entered promiscuous mode
11:19:34 executing program 2:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x1, @output={0x2000, 0x1, {0x21a466f0, 0x9}, 0x1f, 0x40}})
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote={[], 0x0}, 0xb, 'gre0\x00'})

[ 3132.965602][T19434] device lo left promiscuous mode
11:19:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$KDMKTONE(r3, 0x4b30, 0x4)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:34 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000300)=0x46)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00009fd000/0x600000)=nil, 0x600000}, 0x2})
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000200)={<r8=>r7, 0xfffffffa}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r8, 0x3}, &(0x7f00000002c0)=0x8)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3133.099169][T19448] kvm [19434]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3133.166910][T19438] device lo entered promiscuous mode
[ 3133.205332][T19434] device lo left promiscuous mode
[ 3133.413909][   T26] audit: type=1800 audit(1572088774.599:304): pid=19450 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17729 res=0
11:19:34 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:19:34 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:19:34 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x6, 0x1, 0xa9, 0x4000})

11:19:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="9594c02b2bbdcb792976aa5bd0c8626fd925ceb6c0c94a423ecd3516205ea99b3870627477e1b6b73db9da42a5ebf9a8f9b3831f901c46f48632ad61b3626543a8f2e59bd3724cc7589a5b454f825c51d064fdd6aad3d1bfbd4ab4688c70cbaeb1d52bc7ed265ba0486ee4ebeeedf2d65af8be990b27595bd13425f9631a0f89a8518e91620ddd8fb5a50fb872b0779437171a96f195b45128995f2eb1aefb2e4f9ce5f5b87309253d27131f9be10bbdb32df38df6deac16d753614d686ad65b4da95e911ac89c2cc5d14eb6140c02f24969b78becc53a2d6fd412ed78da9c8b9661d6521a554842f7522294367440253f066ebfda3e70fe6fc355fda82a3206f5e9212349374c43c75496e5dbce39be56fe045fc73f45b99a76e336099bb6659958167904b87b40af9876d72da7b5d9327cececdc6c8df2ae3eef7aab184d686fbc638d13f4f0247d55f7d2798cc596aaa7ec11f186ab89deebe46949e20128bb0be4288195a6aa972ddbc332984099780dd412992e5fa2bfed0351a8abf79e7a7c0eab7991980a73e605edc24da3614d76ccb33b9cd738126e10161e94e7b1e1419ba0e5d23d58369162dfe30530f216cacf8813d4e21e388d38520f245e00b118f4aed061635a82fc1d9f1c210c136a8c4a5c947d654425ea640a74aacc489f103da4371f537d6d1a351f11a2672e258f6a61cc2061b3c71eabe8fcb33fcf35f004410ddb70f96f3649fc90bce5dd36eadc6d27ec9c8c81f5f269bd82752a767cce34a6dfe0f3dad90e42dec9a86b07320bdae9266c9da85aff117f2723998dad9761f7762c9c326763b67b1fc8c85f25b1bc7223febcc7818cd659808a5b2b6bd318cfbdffd4ff8947b432ac52da4e89c1a4f2cbd7e478cd44fb22db347909db824cf44fe69c5b9a2fa83ca253f051fe9b9fc7bf851f3d2148b94f27904c533312a02587632fd26db45f987ae6b816df184673b791fba2ebfaee50afb3e2c84192bcaf6e742a8c1c78263f02fbb9f970b1ffd629bd358fa7f581b92babb565f91eac6a710c1ae934a3d6baeb3e0460b9a62e39ec707c17cc49e6cd0cd0b7cb0a8422d4d5469fdbdb3d47ca0771f2fc297efa1fbaf1474dd084b16666183287957cf735c319615ecfab0775bf74bf942e07bbf9e10d50c8edc7861d7b543eccde84252f316863efcbef3586c04c62a0fb6d71a067749b6088640be0ad25bdb18048faf4be66c5105e6667a5933fe05930cb9b5714769a4be3c05050e912eb336503c65d6d0c877ceea571a3d8b466f6f5c75fb9814294db4b14dac18a0ac2adb58cae94b8e4027434f3c24515be3bf43f450426d110421bb6d6fe429aa3a1c3fa0799dc196229297eaf2d8791492cf09d542beb0e113417906e21d237a07536081b2b906e33311c9495b7ce5d8df92b31ac594841a91e89f94bc16ba19d2046fb5a8c017745a70e7aac2cecfeffe6829a9298f6b7f47e2c132d4d6c2908220bf0d74e5c831474436a70a0d2727a82bfd1f110749a073e4cc2da20b1420813d0d1d23fda4d5f7a6bfd0cd82885a979cd373f514691e42f829bb3ebe9c58f8253a43d7a4d1061e4d2a984f4c7c68b5ca88eee70e7914be7ba03c724e91abeb65c2765727b3808507459269e19f854191d3f3fedecc90ab4e27b002499c67241148e57bfd5e51e74fb3e018ffa895269e75e72fed19274ac83000b4d43cf71eaa6c75714c126a610cc636b09aa9475f22b859ff965b3fedaf66d7ad208bb0a520873ea487bd1ab6cce4638abc32528f273d1a7e3ea168e7053644ee5de5ea9e02d3ed2d2e1ac717c8b3d59e43b515ab3ff5f42cd449272e7930968fcdca0e0c828145741076be1819ba53a6d4f67e30292bdefae771ab9a31c39eb2acc7e27df7bde7d5c8280b5f173ef99940bf04768cd76000c2c4bca7747b4e4dae5f83d7484525a14278d30c00abfe37ef35ab88babd19e5d353f58aeb4565aea5be0f912f12585243300f3a9b7660a3de35eda52e464e35f538888d03e3bdf43196d3721f8a2656f1e542dfa7fd1b187e5e529123d81fff7264a807efc604ae23d204604ea305966bd3758840aea68b0e082b0cb1b7163ae2838c0f1f48cb3bbf2bc7fa9572e4bfc67713a7bc99cdf1dabbd220148d0d2a3cabd6686b7e220f935cde8d5a7ff803c9cce1802a5462693fa9d999e207243f8a3f2ef8d32623b9b7edff31dae07f81ee7a6bb9c664236f08d25ccd1657d404350189ff91109c60ca4f0dc190aaee8801daa4cd538b1f0ba87597753112738c69e2c9e3febbeb00436a9108d642703018371f2d9f1f3e0d0d8e4dfbf0f16eb51cb1c0b5dd3370c4fa8fc7dc37c8320fbe14ab39c1925f72d5cd562b8e4e335fabf3b3f3f6c9186bb7feb71aa24b6a3bdacb303f3ce4a1407c9c2e7055937f3ac010383af9633bc9b4d74687cb77bfc4d08882e5327805512a8c87cef93d8a041f7081f1387d20e52ca9e380cf380e3dee63089344b1a2bcdb347d69de8971b37c672251cf6cac178e41dff368fa08fa889e93261c4b9721a828837d03419fe52ce107a9c03b0946a636c8740667887051e4902bbf09e6be62ff4d11ea24d015ed2e581b209e0153fac9877d54450c5bb14fc856e3f4ab48a32cde250ebb291d296ab1b9f3a8796ce18313aa492e3f9197310a92a7c44a3ec56905d0feca6f54794f65986e25aefbc70b8ad07d46658f2bdac9da7020ea55cb68bfe10806c3297159aedcfd5054fc4ab84b5de97613fb87a742cb32f052592abc6543f2125c2d008772a4aa7b224f90006376b57b44b1b3932c38e6f79b2b0f50600144e56d8318c6036e3aa826ab0f2a1db6d1418fdd442eab2d679920ff2b0a5f11c70d6df37676f01c7702a5e443beb69ce3f4d063a8bf46da5eea851a65e0d303db88f97b6f20a672ec20e9bb03ac98d22018e80bb8a279585876b6074ec1337a2b1c926b03ddf3bf747a4595ea3af9d284ded4a68cf0c604a4ee8fdc0fcce99c0a516f390797a823d516043ea581ba28a506bee2da1afaec0e5601b916bb2cf5a17d5dc9d0c629ddc8cb8df21cc49ad0b17e5c4dded4f92bfc8184a7ce13d89128415aaa90a5ca6aeb0c91b4a4c93a509be68ec4f42626f2681c5bfd71d23d8c706cf28dde519b31772df0a5b3bbc54b86724274641fb501b3d8882fcdedfc6468242051737448f97c67bc85aac73c97c976e51ba7b40fd4f08a1afc786545abf504a12bc10812a1f68004d8fdd214f16d314938cea6a63cf118432270722f0c20633f9083d0fa303d8aa439f1ac68ae7b8b4dca03e215d8faf17214378b7b820fba2cf77c4a93a1d5795be2b1325202a2295a80de1c614861172710da5794c85bf692511daf52957150f61e1defc05296035be7d79abdc47f6c47bc6738febd7a44ebdbd3e1b4bb1717acb7ffdf3f235d29edafbe70f1e8e7af89e0f159d675058184396c36f029ca0de57f6155912ce624ad0bea590cbe5f865544d172fe390bc4f3b83fa5d01a9ae1894d80857c76aab00e99bed8e43305b15cc60ec99cc405e5c6bbb3c9a8132752d45f2b58be79baddb35c2c4d4eb92a56bd87fe6ab834ae8ca0567546910d25558655b4c3b33f12090028d313c3559248d92f9563161703b96e49c0315b50b81367d332e3f8e4876524e323a019d127d8b5a39a51adad83d91e66900750407111ac813e55324cc39f87611627680b4af67876ed00542900102cd0f7de28d84b070b7acf80e488cd2c6a3b005489a180067b5bfef0f39bdb8f8ebb187e1da9e569174b68f01b2ed65240947e4d4a0d21dd1eeb7923595a4fef94e18da22066533d35642bfb3c6b53ea38013a323ba50859d9f54c5ae1ab8e456db493928cd1c463c50ac68bab934fbaa7ddc32a91ee70ac9a9008ad7b2de40879df6fd8b6ad0e93b3698aa9aa4e326223a590bcf5a4a4bc0a9272f3f9e6cb05784401f6a839c5cc0b525138cb441b2d51948c9c4909298142f837e24023ac1486de8a6e454a7392fe9ceb5aae9c89563dc25975331f29404335c13f485118b7c698577ca98638e45e507ac6e9772468f4b62aafec50da9c0e24e683f1275164cb487938c95e8b4fdf76590201b15a4948eb87ae0b29f09e397bfcfe8d14fbfcccee1c0a94b73c34306d08679f7f27295982ad3e4718ab677d4ed6d4821ad8f359ccef01ff1f868dbfc02dcb260b83aa6072fdeefa817d8a4e0fbbb0c38861e63b45b08cd7bcf60e67f7e50cad77aeda3d355f5166fc3e0c102c33c54915d82b968bbf77e5a8f61d548a7f37d0c847c1b8284051b1ae4c8884b4c3612eafdfb69b8fdc80d6bfa28a2b7bf80420e00b781162ad0ea4f7c02b00ecc54f71c7091ed5814a6ca6d3eaa2ced37db458fad3aabe45b76ea15b0bc0590d66781eb4725011e19c01885a720d9f6e9e7fb9032ecc03e2d5a635d3ecf67c5ccb230b8803c4cf6a0ccbad11a650e1c2e8a9b31330519d9e5c3c8e5ba7647f74d97f19157ab883091cd30ec33d68616c6ff5e3147a10efe08e35dbbc8fe1e7cabeb6151358459fe999fd7ec82a47f8ab94192155ba50647fe4571d3a160f049cd071e4361bb07b684116c7359889051d90904980b4cc114b9a3a3e57b3615a66f8d8a889073d8555a36cfb5c654557792c4ee41f7818c014c8f98507861508ddbdd89210b7ecb335da70b814eb81eca0bfffcc728a07c7d5b20825df198c7f77c6e9afaf25792cb50529d0796b8535d76870e2b181b0eca8bbdc4b17808542d770f8d24d035d8a1e2e7e1bbffecf39e3a700c65116a5f5a29e81b62d067c90026298567408a71005e98dd00b9ff848cd85867716b555694c0645c4d692f95929a538dd5f37c730280ca186f1fe96016acf781b926ba88aec7e5fe23803709e32aba846fbcc30b9476d37cc14a0ee425291a82d398c4d0bca99764e5954387cdf3f954082ba7598dda8bdb59889f5756daed2334e8f549bf3165c30c7c3c1f5020c2db5458d71ba3d462ef16a8be3ce62ce8857dfb250c02283fa7596c3e2942e5dbe69bd12c1e5bf26c8191b9535e52698e3d425bb285fa124c4f235af2991a86173882e58c55d885289c52bdd7184548474515e8962ae7c066c261e757bb1799cb186caed283c9c1091854134e50fc21f41b12a1ebb85da6fd02c583873840d44c5a09617b225c233654158b731e89816937861fc1a09bd148e859036a0d51e1d075d70259ae6a3a8ad29bf7961ccc6de0e23b109f60cf786bdfc82c2579367e2ee2c9de27d9a16fe06aa5435a2ef2ca254ab75c7c0239eed930ba90b1d4b1d759d30210e4bb708863697f4ba45fb5588e2b870d45813f51a37195cfd096a4edcb7e7ae07126db8d6151f7e20353e64f7ef322f667d62486311eb715c63be8d18e3aba015524a5a2002c2afeebc8e38377f04241d7741ca0634022f1a99d2b5a88d19efe6368090c7fc0a8abeb4472248bb044cfa7a00f7c280e1788d37e87d3d2d0d689c1ec851e8f1c89b63ccf4edc880d10ed3bd3d0595a5a90b563db2bd9ab1627906c1f1504b27f507da2514340d11383aaddf87e7da69445ae526a9bf71c642addb28cf0ee6f4f7e1256c784d8effb8ef311233a28ff3c4ba34cc494dcfa04b270e84042b65926dfb51fc3b4a68a94f4333e82028a8a423b0d0d5a551b508d8b41cd7d60d1ccdae9b9143ead0a3ecb3f5866787cd4e5b1d2aee036f908e5641e04814702096913907f2fe6439c6f85a435681feec08b84d22febe67da0d4eeafe601fb4df702f369c6faeb64035361d27f")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:34 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x9000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:34 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x2, @capture={0x0, 0x0, {}, 0x1, 0xfffffffd}})

[ 3133.616158][T19488] kvm [19482]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:34 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

11:19:34 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

11:19:35 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x3, 0x8})
write$selinux_attr(r3, &(0x7f0000000200)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0)
pread64(r6, &(0x7f0000000100)=""/65, 0x41, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3133.834391][T19505] device lo entered promiscuous mode
11:19:35 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)

[ 3133.935149][T19510] kvm [19509]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:35 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

11:19:35 executing program 1:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x74028caddeec4147)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2)
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x0, @remote}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r7=>r6})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', r7})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10)
r8 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3134.133002][T19526] device lo entered promiscuous mode
[ 3134.162016][T19524] device lo left promiscuous mode
11:19:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x4000)
recvmsg$kcm(r2, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x3, 0x20, r2, &(0x7f0000000000)='./file0\x00')
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9d)
r6 = fcntl$dupfd(r4, 0xe09, r5)
r7 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x59)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3134.239514][T19526] device lo entered promiscuous mode
[ 3134.251675][T19524] device lo left promiscuous mode
[ 3134.300075][T19533] kvm [19531]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3134.354724][T19536] kvm [19531]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3134.443223][T19486] device lo left promiscuous mode
11:19:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:35 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000680)="f28684fb09387046d02462262745aa9adda66cc118e80ea7cf3a08cc6021ba0619cf05196369d4ebc43e54fcde47aff7754a9391e341b1c39ba56e5974f6c771606f8c6766e9a2387c9865fdb649097f4acec3bca815ea0737", &(0x7f0000000700)=""/157}, 0x20)

11:19:35 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

11:19:35 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4102, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@deltfilter={0x58, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7ff0, 0x2}, {0x0, 0x7ff9}, {0xfff3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_RATE={0x8, 0x5, {0x6, 0x9b}}, @TCA_CHAIN={0x8, 0xb, 0x458}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x29, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x3fe}, 0x1, 0x0, 0x0, 0x40810}, 0x20001048)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f00000004c0)={'U-', 0x1000}, 0x28, 0x3)
r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7f, 0x8000)
ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="58b7a46694c33402f6c5839fccf1ff0aa1a2531098525f0ed21406ea629f97048d1d739faf8544862d8207c1767452df3e920aca114bce140000241db00f1e29cb8226fcb547c142cd3b5de65a09ff1bb3caf304bf0da332516175de4e28cb5ca7a8d890a3574ae7407f14b2f3395280d73e6e4ab5322e1b95d7a3165bba91a693564ee974d81a8d349af302a95766b69e3f373d0837fe201717de9d0c51a223fb18f4e19588398b4fe1a438710013b5fc87cfe06d957be947a8d0a6a02d6b8464c0d37b35f01a65d9c6"])
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @empty, r1}, 0xc)
r5 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r6, &(0x7f0000000400)="333bdfb02d329a1ca49a1bceebc8846dacdaebf7a1d1991dcf9a328892f8fea66a"}, 0x20)

11:19:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=<r4=>0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r5, 0x0, 0x7, &(0x7f00000000c0)='cpuset\x00', r6}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:35 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xa000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:35 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000680)="f28684fb09387046d02462262745aa9adda66cc118e80ea7cf3a08cc6021ba0619cf05196369d4ebc43e54fcde47aff7754a9391e341b1c39ba56e5974f6c771606f8c6766e9a2387c9865fdb649097f4acec3bca815ea0737", &(0x7f0000000700)=""/157}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, 0x0, 0x0)

11:19:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x9, 0x0, 0x0, 0x9, 0x5}, 0x10)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:36 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000680)="f28684fb09387046d02462262745aa9adda66cc118e80ea7cf3a08cc6021ba0619cf05196369d4ebc43e54fcde47aff7754a9391e341b1c39ba56e5974f6c771606f8c6766e9a2387c9865fdb649097f4acec3bca815ea0737", &(0x7f0000000700)=""/157}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x3f, 0x80, 0x0, 0xfbd4115, 0x82200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0xa0, 0x7fffffff, 0x0, 0x5, 0x1f, 0xaaa, 0x1}, 0xffffffffffffffff, 0xf, r2, 0x8)

[ 3134.871113][T19572] device lo entered promiscuous mode
[ 3134.914506][T19573] kvm [19566]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:36 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000680)="f28684fb09387046d02462262745aa9adda66cc118e80ea7cf3a08cc6021ba0619cf05196369d4ebc43e54fcde47aff7754a9391e341b1c39ba56e5974f6c771606f8c6766e9a2387c9865fdb649097f4acec3bca815ea0737", &(0x7f0000000700)=""/157}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x3f, 0x80, 0x0, 0xfbd4115, 0x82200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0xa0, 0x7fffffff, 0x0, 0x5, 0x1f, 0xaaa, 0x1}, 0xffffffffffffffff, 0xf, r2, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2000, 0x0)

11:19:36 executing program 4:
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000680)="f28684fb09387046d02462262745aa9adda66cc118e80ea7cf3a08cc6021ba0619cf05196369d4ebc43e54fcde47aff7754a9391e341b1c39ba56e5974f6c771606f8c6766e9a2387c9865fdb649097f4acec3bca815ea0737", &(0x7f0000000700)=""/157}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x3f, 0x80, 0x0, 0xfbd4115, 0x82200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0xa0, 0x7fffffff, 0x0, 0x5, 0x1f, 0xaaa, 0x1}, 0xffffffffffffffff, 0xf, r2, 0x8)

11:19:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3135.269434][T19584] kvm [19582]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3135.298316][    C1] net_ratelimit: 2 callbacks suppressed
[ 3135.298324][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3135.309740][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3135.315543][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3135.322292][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3135.485488][T19553] device lo left promiscuous mode
11:19:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11:19:36 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0)
fcntl$setstatus(r0, 0x4, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

11:19:36 executing program 4:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x4})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)=0x8001)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000140))

11:19:36 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = semget$private(0x0, 0x7, 0x0)
semop(r1, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
semop(r1, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$RTC_WIE_OFF(r3, 0x7010)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x8, 0x808e, 0x1de, 0x5, 0x7])
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000001c0)=0x8)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:36 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xb000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3135.687983][T19600] kvm [19599]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3135.896443][T19621] device lo entered promiscuous mode
11:19:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x14)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x1}, 0x14}}, 0x0)
inotify_init()
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xad}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

[ 3136.263850][T19626] kvm [19625]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x185)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/dev/kvm\x00')
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:37 executing program 4 (fault-call:8 fault-nth:0):
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3136.480730][   T26] audit: type=1800 audit(1572088777.669:305): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17825 res=0
11:19:37 executing program 2 (fault-call:8 fault-nth:0):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3136.526991][T19604] device lo left promiscuous mode
[ 3136.585865][T19634] kvm [19631]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:37 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x800, 0x1, {0x1f, 0x20}, 0x3, 0x401}})

11:19:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3136.636963][T19638] FAULT_INJECTION: forcing a failure.
[ 3136.636963][T19638] name failslab, interval 1, probability 0, space 0, times 0
11:19:37 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]})
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3136.742694][T19638] CPU: 0 PID: 19638 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0
[ 3136.750630][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3136.760745][T19638] Call Trace:
[ 3136.764039][T19638]  dump_stack+0x1d8/0x2f8
[ 3136.768383][T19638]  should_fail+0x555/0x770
[ 3136.772812][T19638]  __should_failslab+0x11a/0x160
[ 3136.777838][T19638]  ? kernfs_fop_write+0x140/0x4e0
[ 3136.782865][T19638]  should_failslab+0x9/0x20
[ 3136.787368][T19638]  __kmalloc+0x7a/0x340
[ 3136.791525][T19638]  kernfs_fop_write+0x140/0x4e0
[ 3136.796382][T19638]  ? trace_lock_acquire+0x159/0x1d0
[ 3136.801580][T19638]  ? kernfs_fop_read+0x580/0x580
[ 3136.806525][T19638]  __vfs_write+0xb8/0x740
[ 3136.810863][T19638]  ? rcu_read_lock_any_held+0x13d/0x1a0
[ 3136.816416][T19638]  ? __sb_start_write+0x382/0x430
[ 3136.821439][T19638]  vfs_write+0x275/0x590
[ 3136.825690][T19638]  ksys_write+0x117/0x220
[ 3136.830021][T19638]  __x64_sys_write+0x7b/0x90
[ 3136.834609][T19638]  do_syscall_64+0xf7/0x1c0
[ 3136.839102][T19638]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3136.839122][T19638] RIP: 0033:0x459f39
[ 3136.839132][T19638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3136.839137][T19638] RSP: 002b:00007f670ca51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3136.839146][T19638] RAX: ffffffffffffffda RBX: 00007f670ca51c90 RCX: 0000000000459f39
[ 3136.839152][T19638] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007
11:19:38 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xc000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1a3a01, 0x0)
write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x5}, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000100)={0x10})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:38 executing program 2 (fault-call:8 fault-nth:1):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3136.839157][T19638] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3136.839162][T19638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f670ca526d4
[ 3136.839167][T19638] R13: 00000000004ca629 R14: 00000000004e25d8 R15: 0000000000000008
[ 3136.976339][T19656] kvm [19651]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3136.995046][T19655] FAULT_INJECTION: forcing a failure.
[ 3136.995046][T19655] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3137.012224][T19660] FAULT_INJECTION: forcing a failure.
[ 3137.012224][T19660] name failslab, interval 1, probability 0, space 0, times 0
11:19:38 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x303902, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x7, @sdr={0x1a192b27}})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
dup2(r2, r3)
shutdown(r1, 0x1)
r4 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20800, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000300)={0xa, 0x401, 0x24f})
ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3137.044105][T19660] CPU: 0 PID: 19660 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0
[ 3137.052025][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.062075][T19660] Call Trace:
[ 3137.065352][T19660]  dump_stack+0x1d8/0x2f8
[ 3137.069665][T19660]  should_fail+0x555/0x770
[ 3137.074065][T19660]  __should_failslab+0x11a/0x160
[ 3137.078981][T19660]  should_failslab+0x9/0x20
[ 3137.083463][T19660]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 3137.088796][T19660]  ? find_css_set+0xb66/0x1970
[ 3137.093537][T19660]  find_css_set+0xb66/0x1970
[ 3137.098119][T19660]  cgroup_migrate_prepare_dst+0x11b/0xc10
[ 3137.103819][T19660]  cgroup_attach_task+0x73d/0xa10
[ 3137.108840][T19660]  cgroup_procs_write+0x17e/0x2f0
[ 3137.113928][T19660]  ? cgroup_procs_next+0x60/0x60
[ 3137.118855][T19660]  cgroup_file_write+0x223/0x5f0
[ 3137.123771][T19660]  ? cgroup_seqfile_stop+0xc0/0xc0
[ 3137.128869][T19660]  kernfs_fop_write+0x3e4/0x4e0
[ 3137.133694][T19660]  ? kernfs_fop_read+0x580/0x580
[ 3137.138611][T19660]  __vfs_write+0xb8/0x740
[ 3137.142938][T19660]  ? rcu_read_lock_any_held+0x13d/0x1a0
[ 3137.148480][T19660]  ? __sb_start_write+0x382/0x430
[ 3137.153479][T19660]  vfs_write+0x275/0x590
[ 3137.157701][T19660]  ksys_write+0x117/0x220
[ 3137.162011][T19660]  __x64_sys_write+0x7b/0x90
[ 3137.166587][T19660]  do_syscall_64+0xf7/0x1c0
[ 3137.171068][T19660]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.176935][T19660] RIP: 0033:0x459f39
[ 3137.180805][T19660] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3137.200384][T19660] RSP: 002b:00007f670ca51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3137.208770][T19660] RAX: ffffffffffffffda RBX: 00007f670ca51c90 RCX: 0000000000459f39
[ 3137.216722][T19660] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007
[ 3137.224677][T19660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3137.232633][T19660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f670ca526d4
[ 3137.240580][T19660] R13: 00000000004ca629 R14: 00000000004e25d8 R15: 0000000000000008
[ 3137.256385][T19655] CPU: 1 PID: 19655 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0
[ 3137.264309][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.274396][T19655] Call Trace:
[ 3137.277703][T19655]  dump_stack+0x1d8/0x2f8
[ 3137.282070][T19655]  should_fail+0x555/0x770
[ 3137.286510][T19655]  should_fail_alloc_page+0x55/0x60
[ 3137.291712][T19655]  prepare_alloc_pages+0x283/0x460
[ 3137.296836][T19655]  __alloc_pages_nodemask+0xb2/0x5d0
[ 3137.302131][T19655]  alloc_pages_current+0x2db/0x500
[ 3137.307243][T19655]  pipe_write+0x3fa/0xeb0
[ 3137.307294][T19655]  __vfs_write+0x5a1/0x740
[ 3137.316902][T19655]  vfs_write+0x275/0x590
[ 3137.321165][T19655]  ksys_write+0x117/0x220
[ 3137.325497][T19655]  __x64_sys_write+0x7b/0x90
[ 3137.325513][T19655]  do_syscall_64+0xf7/0x1c0
[ 3137.325526][T19655]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.325538][T19655] RIP: 0033:0x459f39
[ 3137.340479][T19655] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3137.340486][T19655] RSP: 002b:00007f0c9eeaac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3137.340497][T19655] RAX: ffffffffffffffda RBX: 00007f0c9eeaac90 RCX: 0000000000459f39
[ 3137.340503][T19655] RDX: 00000000526987c9 RSI: 00000000200001c0 RDI: 0000000000000006
11:19:38 executing program 4 (fault-call:8 fault-nth:1):
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

[ 3137.340509][T19655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3137.340515][T19655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c9eeab6d4
[ 3137.340524][T19655] R13: 00000000004c68f2 R14: 00000000004e17f8 R15: 0000000000000007
[ 3137.413297][T19662] device lo entered promiscuous mode
[ 3137.455750][T19666] kvm [19651]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3137.495975][T19668] FAULT_INJECTION: forcing a failure.
[ 3137.495975][T19668] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3137.538668][T19668] CPU: 0 PID: 19668 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0
[ 3137.546587][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3137.556631][T19668] Call Trace:
[ 3137.559915][T19668]  dump_stack+0x1d8/0x2f8
[ 3137.564226][T19668]  should_fail+0x555/0x770
[ 3137.568623][T19668]  should_fail_alloc_page+0x55/0x60
[ 3137.573794][T19668]  prepare_alloc_pages+0x283/0x460
[ 3137.578881][T19668]  __alloc_pages_nodemask+0xb2/0x5d0
[ 3137.584162][T19668]  alloc_pages_current+0x2db/0x500
[ 3137.589250][T19668]  __page_cache_alloc+0x7d/0x1e0
[ 3137.594162][T19668]  pagecache_get_page+0x1f1/0xa40
[ 3137.599160][T19668]  ? rcu_lock_release+0x26/0x30
[ 3137.603986][T19668]  filemap_fault+0x15a9/0x1c60
[ 3137.608730][T19668]  __do_fault+0x144/0x3d0
[ 3137.613035][T19668]  handle_mm_fault+0x42f1/0x5ff0
[ 3137.617962][T19668]  do_user_addr_fault+0x589/0xaf0
[ 3137.618344][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3137.622973][T19668]  __do_page_fault+0xd3/0x1f0
[ 3137.629288][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3137.633857][T19668]  do_page_fault+0x99/0xb0
[ 3137.643944][T19668]  page_fault+0x39/0x40
[ 3137.648109][T19668] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 3137.654675][T19668] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 3137.674265][T19668] RSP: 0018:ffff888097e4fb88 EFLAGS: 00010206
[ 3137.680318][T19668] RAX: ffffffff83436401 RBX: 00000000200011c0 RCX: 00000000000001c0
[ 3137.688273][T19668] RDX: 0000000000001000 RSI: 0000000020001000 RDI: ffff88808df40e40
[ 3137.696221][T19668] RBP: ffff888097e4fbb8 R08: dffffc0000000000 R09: ffffed1011be8200
[ 3137.704165][T19668] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 3137.712112][T19668] R13: 00007ffffffff000 R14: 00000000200001c0 R15: ffff88808df40000
[ 3137.720067][T19668]  ? copyin+0x31/0x140
[ 3137.724133][T19668]  ? copyin+0xf3/0x140
[ 3137.728187][T19668]  copy_page_from_iter+0x40b/0x710
[ 3137.733282][T19668]  pipe_write+0x447/0xeb0
[ 3137.737596][T19668]  __vfs_write+0x5a1/0x740
[ 3137.741996][T19668]  vfs_write+0x275/0x590
[ 3137.746215][T19668]  ksys_write+0x117/0x220
[ 3137.750520][T19668]  __x64_sys_write+0x7b/0x90
[ 3137.755084][T19668]  do_syscall_64+0xf7/0x1c0
[ 3137.759573][T19668]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3137.765447][T19668] RIP: 0033:0x459f39
[ 3137.769319][T19668] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3137.789012][T19668] RSP: 002b:00007f0c9eeaac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3137.797400][T19668] RAX: ffffffffffffffda RBX: 00007f0c9eeaac90 RCX: 0000000000459f39
[ 3137.805351][T19668] RDX: 00000000526987c9 RSI: 00000000200001c0 RDI: 0000000000000006
[ 3137.813301][T19668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3137.821271][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c9eeab6d4
[ 3137.829217][T19668] R13: 00000000004c68f2 R14: 00000000004e17f8 R15: 0000000000000007
11:19:39 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x430080, 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x7, 0x9c})
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000001c0)={{0x3, 0x2, 0x0, 0x2, 0x9}, 0xfffffffffffffe01, 0x200})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:39 executing program 2 (fault-call:8 fault-nth:2):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3137.837391][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3137.843181][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3137.939901][T19644] device lo left promiscuous mode
11:19:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x9, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=<r5=>0x0)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000001c0), 0x4)
capset(&(0x7f0000000100)={0x701c0df7, r5}, &(0x7f0000000140)={0x5, 0x40, 0x7, 0x0, 0xffffff81, 0x275c3dca})

11:19:39 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/de\x92/vid\x00\x02\x00\x01', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x2000, 0x1, {0x6, 0x101}, 0x800, 0x81}})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x6, 0x7, 0x3, 0x1}, 0x8)

11:19:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x85, 0xff}]})

[ 3138.076002][T19686] FAULT_INJECTION: forcing a failure.
[ 3138.076002][T19686] name failslab, interval 1, probability 0, space 0, times 0
[ 3138.129266][T19686] CPU: 1 PID: 19686 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0
[ 3138.137191][T19686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3138.147226][T19686] Call Trace:
[ 3138.150540][T19686]  dump_stack+0x1d8/0x2f8
[ 3138.154851][T19686]  should_fail+0x555/0x770
[ 3138.159249][T19686]  __should_failslab+0x11a/0x160
[ 3138.164169][T19686]  should_failslab+0x9/0x20
[ 3138.168650][T19686]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 3138.173913][T19686]  ? find_css_set+0xc36/0x1970
[ 3138.178677][T19686]  find_css_set+0xc36/0x1970
[ 3138.183251][T19686]  cgroup_migrate_prepare_dst+0x11b/0xc10
[ 3138.188949][T19686]  cgroup_attach_task+0x73d/0xa10
[ 3138.193953][T19686]  cgroup_procs_write+0x17e/0x2f0
[ 3138.198949][T19686]  ? cgroup_procs_next+0x60/0x60
[ 3138.203858][T19686]  cgroup_file_write+0x223/0x5f0
[ 3138.208778][T19686]  ? cgroup_seqfile_stop+0xc0/0xc0
[ 3138.213878][T19686]  kernfs_fop_write+0x3e4/0x4e0
[ 3138.218725][T19686]  ? kernfs_fop_read+0x580/0x580
[ 3138.223639][T19686]  __vfs_write+0xb8/0x740
[ 3138.228035][T19686]  ? rcu_read_lock_any_held+0x13d/0x1a0
[ 3138.233568][T19686]  ? __sb_start_write+0x382/0x430
[ 3138.238574][T19686]  vfs_write+0x275/0x590
[ 3138.242802][T19686]  ksys_write+0x117/0x220
[ 3138.247107][T19686]  __x64_sys_write+0x7b/0x90
[ 3138.251682][T19686]  do_syscall_64+0xf7/0x1c0
[ 3138.256344][T19686]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3138.262326][T19686] RIP: 0033:0x459f39
[ 3138.266201][T19686] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3138.285952][T19686] RSP: 002b:00007f670ca51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3138.294335][T19686] RAX: ffffffffffffffda RBX: 00007f670ca51c90 RCX: 0000000000459f39
[ 3138.302292][T19686] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007
[ 3138.312842][T19686] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3138.320792][T19686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f670ca526d4
11:19:39 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xd000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3138.328748][T19686] R13: 00000000004ca629 R14: 00000000004e25d8 R15: 0000000000000008
[ 3138.368099][T19688] kvm [19687]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:39 executing program 1:
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000000c0)={0xa})
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xc0c01)

11:19:39 executing program 2 (fault-call:8 fault-nth:3):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:39 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0xac, 0x40000022], [0xc1]})

[ 3138.547047][T19709] device lo entered promiscuous mode
11:19:39 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xc11, 0xc, 0x2, "79040bc9a23f3dd9eca62e28442aa2edc82732a1f458963f12978f958049e751", 0x30395056})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3138.649278][T19714] FAULT_INJECTION: forcing a failure.
[ 3138.649278][T19714] name failslab, interval 1, probability 0, space 0, times 0
[ 3138.662021][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3138.662073][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3138.679266][T19714] CPU: 0 PID: 19714 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0
[ 3138.687172][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3138.697222][T19714] Call Trace:
[ 3138.700514][T19714]  dump_stack+0x1d8/0x2f8
[ 3138.704843][T19714]  should_fail+0x555/0x770
[ 3138.709265][T19714]  __should_failslab+0x11a/0x160
[ 3138.714205][T19714]  should_failslab+0x9/0x20
[ 3138.718708][T19714]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 3138.723989][T19714]  ? find_css_set+0xc36/0x1970
[ 3138.728755][T19714]  find_css_set+0xc36/0x1970
[ 3138.733362][T19714]  cgroup_migrate_prepare_dst+0x11b/0xc10
[ 3138.739089][T19714]  cgroup_attach_task+0x73d/0xa10
[ 3138.744128][T19714]  cgroup_procs_write+0x17e/0x2f0
[ 3138.749151][T19714]  ? cgroup_procs_next+0x60/0x60
[ 3138.754082][T19714]  cgroup_file_write+0x223/0x5f0
[ 3138.759019][T19714]  ? cgroup_seqfile_stop+0xc0/0xc0
[ 3138.764137][T19714]  kernfs_fop_write+0x3e4/0x4e0
[ 3138.768988][T19714]  ? kernfs_fop_read+0x580/0x580
[ 3138.773929][T19714]  __vfs_write+0xb8/0x740
[ 3138.778261][T19714]  ? rcu_read_lock_any_held+0x13d/0x1a0
[ 3138.783807][T19714]  ? __sb_start_write+0x382/0x430
[ 3138.788836][T19714]  vfs_write+0x275/0x590
[ 3138.793085][T19714]  ksys_write+0x117/0x220
[ 3138.797416][T19714]  __x64_sys_write+0x7b/0x90
[ 3138.802015][T19714]  do_syscall_64+0xf7/0x1c0
[ 3138.806520][T19714]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3138.812407][T19714] RIP: 0033:0x459f39
[ 3138.816297][T19714] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3138.835898][T19714] RSP: 002b:00007f670ca51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3138.844308][T19714] RAX: ffffffffffffffda RBX: 00007f670ca51c90 RCX: 0000000000459f39
[ 3138.852281][T19714] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007
[ 3138.860251][T19714] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3138.868222][T19714] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f670ca526d4
[ 3138.876190][T19714] R13: 00000000004ca629 R14: 00000000004e25d8 R15: 0000000000000008
11:19:40 executing program 2 (fault-call:8 fault-nth:4):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:40 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x7f)

11:19:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3139.059981][T19731] FAULT_INJECTION: forcing a failure.
[ 3139.059981][T19731] name failslab, interval 1, probability 0, space 0, times 0
[ 3139.085399][T19731] CPU: 1 PID: 19731 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0
[ 3139.093339][T19731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3139.103487][T19731] Call Trace:
[ 3139.106797][T19731]  dump_stack+0x1d8/0x2f8
[ 3139.111143][T19731]  should_fail+0x555/0x770
[ 3139.115546][T19731]  __should_failslab+0x11a/0x160
[ 3139.120480][T19731]  should_failslab+0x9/0x20
[ 3139.124981][T19731]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 3139.130262][T19731]  ? find_css_set+0xc36/0x1970
[ 3139.135027][T19731]  find_css_set+0xc36/0x1970
[ 3139.139639][T19731]  cgroup_migrate_prepare_dst+0x11b/0xc10
[ 3139.145366][T19731]  cgroup_attach_task+0x73d/0xa10
[ 3139.150405][T19731]  cgroup_procs_write+0x17e/0x2f0
[ 3139.155426][T19731]  ? cgroup_procs_next+0x60/0x60
[ 3139.160357][T19731]  cgroup_file_write+0x223/0x5f0
[ 3139.165292][T19731]  ? cgroup_seqfile_stop+0xc0/0xc0
[ 3139.170399][T19731]  kernfs_fop_write+0x3e4/0x4e0
[ 3139.175243][T19731]  ? kernfs_fop_read+0x580/0x580
[ 3139.180175][T19731]  __vfs_write+0xb8/0x740
[ 3139.184504][T19731]  ? rcu_read_lock_any_held+0x13d/0x1a0
[ 3139.190039][T19731]  ? __sb_start_write+0x382/0x430
[ 3139.195056][T19731]  vfs_write+0x275/0x590
[ 3139.199311][T19731]  ksys_write+0x117/0x220
[ 3139.203636][T19731]  __x64_sys_write+0x7b/0x90
[ 3139.208222][T19731]  do_syscall_64+0xf7/0x1c0
[ 3139.212719][T19731]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3139.218607][T19731] RIP: 0033:0x459f39
[ 3139.222494][T19731] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3139.242118][T19731] RSP: 002b:00007f670ca51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3139.250534][T19731] RAX: ffffffffffffffda RBX: 00007f670ca51c90 RCX: 0000000000459f39
[ 3139.258501][T19731] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000007
[ 3139.266463][T19731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3139.274425][T19731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f670ca526d4
[ 3139.282391][T19731] R13: 00000000004ca629 R14: 00000000004e25d8 R15: 0000000000000008
11:19:40 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x44000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x1000)

11:19:40 executing program 2 (fault-call:8 fault-nth:5):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3139.325799][T19691] device lo left promiscuous mode
[ 3139.337963][T19737] kvm [19735]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r4 = semget$private(0x0, 0x7, 0x0)
semop(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r4, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r8}, 0x10)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})

11:19:40 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0xe000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:40 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x2000)

11:19:40 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:40 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
memfd_create(&(0x7f0000000040)='/dev/video#\x00', 0x1)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x1ff, 0x7, 0x23, 0x0, 0x6, 0x4000, 0xf000, [], 0x9})

11:19:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8000, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000000)=0x1)

11:19:40 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x20000112)

11:19:40 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x3000)

11:19:41 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x9, 0x8, 0x3f, 0x8000, 0x4, 0x7ff})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3139.759572][T19774] device lo entered promiscuous mode
11:19:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x2d, 0x4, 0x0, {0x2, 0xfffffffffffffffa, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d)

11:19:41 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x7ffff000)

11:19:41 executing program 1:
futex(&(0x7f0000000200)=0x1, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x2)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0xc)
ptrace$poke(0x4, r1, &(0x7f00000001c0), 0x3f)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3140.062736][T19793] kvm [19792]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3140.324245][   T26] audit: type=1800 audit(1572088781.509:306): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17356 res=0
[ 3140.373070][T19751] device lo left promiscuous mode
11:19:41 executing program 1:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)

11:19:41 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x4000)

11:19:41 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r3 = semget$private(0x0, 0x7, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r3, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r4 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r7}, 0x10)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000001c0))

11:19:41 executing program 2:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000540)=0xfffffc01, 0x4)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r0, 0x4)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x82880, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
clone3(&(0x7f0000000280)={0x10000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x36, 0x0, &(0x7f0000000500)=""/41, 0x29, &(0x7f00000003c0)=""/132}, 0x40)
r3 = getpid()
ptrace$setsig(0x4203, r3, 0x3ae, &(0x7f0000000480)={0x1d, 0xfffffffd, 0x1})
r4 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x800, 0x0)

11:19:41 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x10000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x280000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
r5 = gettid()
tkill(r5, 0x2e)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00', <r8=>r7}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, r6, 0x0, 0x18, &(0x7f0000000040)='keyringkeyringvmnet1\xdb}(\x00', r8}, 0x30)
ioctl$LOOP_SET_FD(r2, 0x4c00, r4)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4008ae89, &(0x7f00000001c0)={0x1872785788f60b0, 0x5, [0x5, 0x0, 0x40000022], [0xc1]})

11:19:41 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = socket$vsock_dgram(0x28, 0x2, 0x0)
recvfrom(r1, &(0x7f0000000200)=""/249, 0xf9, 0x1, &(0x7f0000000300)=@nfc={0x27, 0x0, 0x2}, 0x80)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000380)={0x1db, {{0x2, 0x4e21, @rand_addr=0x5}}}, 0x88)
accept4$llc(r2, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0)

11:19:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x408042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x200c02, 0x90)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000000c0)={{0xfe, 0x80, 0x8, 0x0, 0x5f, 0x61}, 0xff, 0x5, 0x2b, 0xbb, 0x2, "6851fa5c71b9877dcef258f7c5357480d16d53d7d96ebd47041411c77571e297296dbf3874733bc65cc71e7e9e3e6dc005ce51b134c7ca9ede9f37eafbc1255d4730e4f6f8190abd74396f4986933f10af61239dce217fb8648bd401e2f24d38e3ff439a2031921e504dc42743799fc496ad3596e0d3cb120483e39219ee133c"})
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r6, 0x400443c9, &(0x7f00000001c0)={{0x1, 0x2, 0x7, 0x5, 0x8, 0xf8}, 0xfffffff0})

11:19:41 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x222)

11:19:41 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x5000)

11:19:41 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0)
syz_open_pts(r2, 0x10100)
sendto$llc(r1, &(0x7f0000000200)="9ef1312c58c00dc217ded7b26a58", 0xe, 0x40002, &(0x7f0000000240)={0x1a, 0x6, 0xf8, 0x7f, 0x7f, 0x80, @remote}, 0x10)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)

[ 3140.751802][T19846] device lo entered promiscuous mode
11:19:42 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000180)={0xa6, 0x29, 0x2, {0x5, [{{0x2, 0x0, 0x7}, 0x7fff, 0x8, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0xb9, 0x2, 0x2}, 0x100000001, 0x6c, 0x7, './file0'}, {{0x30, 0x2, 0x7}, 0xfffffffffffffff7, 0x2, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0xdd, 0x5, 0x7, './file0'}]}}, 0xa6)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xc240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x1)
ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000000c0))
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x9d)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x9d)
r10 = open$dir(&(0x7f0000002700)='./file0\x00', 0x103000, 0x82)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000002780)={0x0, &(0x7f0000002740)=[r7, r8, r4, r9, r10, 0xffffffffffffffff]}, 0x6)

[ 3140.898330][    C1] net_ratelimit: 4 callbacks suppressed
[ 3140.898336][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3140.909775][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3141.167326][   T26] audit: type=1800 audit(1572088782.349:307): pid=19829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17761 res=0
[ 3141.376807][T19820] device lo left promiscuous mode
11:19:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r3 = semget$private(0x0, 0x7, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r3, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r4 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r7}, 0x10)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)

11:19:42 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {0xfffffffe, 0x1}}})

11:19:42 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x6000)

11:19:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3073c0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x10002)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:42 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/nfsfs\x00')
write$9p(r1, &(0x7f0000000240)="302c6a0d85f273424ea9ab03a88ce4d8f7205a0ba550d7b2512369930ae2da7bd8cc2722a4ed8f3cf2b80aae9a661e2d6438701071919855826271ae297a205188baf0658aa89a4842dd6dbbf6ec91ea1967375001d09bf92c78f3729d49f165e9af1b5a46e4f97b9553cdd5278b8732abb97017ea832cd214f5ba0b441e3bf8a18cf203eb27b550e321c8117bad1cea9153a5e45a390f2b34df9479406d", 0x9e)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x2000, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x2)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
move_mount(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x10)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
gettid()
read(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)

11:19:42 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x11000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3141.555052][T19880] kvm [19875]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:42 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
getrusage(0x1, &(0x7f0000000280))
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:42 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x7000)

11:19:42 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2, 0x1, 0x10, 0x6, 0x3}, &(0x7f0000000180)=0x20)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x6020, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/179, 0xb3}], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
write$cgroup_pid(r4, &(0x7f0000000100), 0xf8)

[ 3141.621265][T19890] kvm [19875]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000280))
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "62781dc8355a5db3cf1470c1513e774c51"}, 0x12, 0x80eaf2f93f78f944)

11:19:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x181800, 0x100)
sendto$inet6(r5, &(0x7f00000000c0)="1fd6efdbaeb14cd55b57ba9ebcdea7b7042aa56018f957d09d00bf4f51d727f6ead40d2e50ba80b065fa05662c698af76137258ea6b3ff5d3fb653226230467fbd3deeae6200822378d37b8053c431c28bca002b634db0ee78400dcfcdfce6211680d14902f142ff5b078555799a5a7884f9ea18bfb40d4b8daec7f208", 0x7d, 0x5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffbff, @mcast2}, 0x1c)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2000, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x5, 0x0, 0x40000022, 0xffffffffffffffff], [0xc1]})

[ 3141.763142][T19905] device lo entered promiscuous mode
[ 3141.778425][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.784226][    C1] protocol 88fb is buggy, dev hsr_slave_1
11:19:43 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x9000)

[ 3141.938328][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.944335][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3142.185097][   T26] audit: type=1800 audit(1572088783.369:308): pid=19888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17886 res=0
[ 3142.209487][   T26] audit: type=1800 audit(1572088783.369:309): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17891 res=0
[ 3142.363654][T19878] device lo left promiscuous mode
11:19:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r3 = semget$private(0x0, 0x7, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r3, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r4 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r7}, 0x10)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000900)="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")
pipe2(&(0x7f00000001c0), 0x0)

11:19:43 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x68000)
pipe2(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
rt_sigtimedwait(&(0x7f00000001c0)={0x8}, &(0x7f0000000280), &(0x7f00000003c0)={0x0, 0x989680}, 0x8)
recvmsg$kcm(r1, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.t(reads\x00\x8b\x86\xae;r\xdc3\x04L\xb8\xad\x1d:\xc0-6Y\xea\xf6\xc7\x82\xe3.\x9f#H1\x1a\xab\xe5\x98Fj\xf7\xd12\xc7u<x \vx+4A\a\x00\x00\x00\x00\x00', 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000300)={0x7}, 0x0, 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
write$P9_RFLUSH(r2, &(0x7f0000000400)={0x7, 0x6d, 0x2}, 0x7)
open(&(0x7f0000000040)='./file0\x00', 0x20200, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r0, &(0x7f0000000480)='\x00\x00\x00\x00\xac(\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0xfffffffffffffea8)

11:19:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='\x00\x01\x8bm\x8f\xb9\x00\x05\x10\v\x00', 0x1, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x2, @capture={0x0, 0x0, {0xde55, 0x6}}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

11:19:43 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xa000)

11:19:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/d\xad\x00\x00\x00vm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:43 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x12000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:43 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {0x5}}})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={<r4=>0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc)
r5 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x0, @remote}, 0x10)
r9 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x6, @remote}, 0x10)
r11 = socket(0x100000000011, 0x2, 0x0)
bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000000)={r12, 0x1, 0x0, @remote}, 0x10)
r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x1, 0x0)
ioctl$TIOCGPTPEER(r13, 0x5441, 0x2)
accept(0xffffffffffffffff, &(0x7f0000000280)=@hci={0x1f, <r14=>0x0}, &(0x7f0000000300)=0xfffffffffffffe8b)
pipe2(&(0x7f00000001c0)={<r15=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r15, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r16=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r16, 0x0, 0x0)
setsockopt$inet_dccp_buf(r16, 0x21, 0xc0, &(0x7f0000000940)="1c443afeb4298d6c58847a0020e1efb791f8ceff06402ad642391407839b421c0f85cf43b7e67b0cfc9914823f9c40c92412958380487827c93702662cf2f920ee3aff35c2ad149f478cd660041b5a817c9eca3ed3bf4d007646327de2937ab96710e4959c814aa29d8d05a1c9eb2a7ee007a2fcb56dbf2893408aaa69eb407e4837fe99ba667c2898a7d0f1304af42502d4176c50c92d91f20bb81232e171cce1bd76b03dc9832e7890682e91934014f41bfef071fcf45c2e86eb66cf92cbf554cf86a2c9225a25b130d381e974cb52649a", 0xd2)
getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000900)={&(0x7f0000000080), 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000a2", @ANYRES16=r2, @ANYBLOB="040026f45b6171dbdf25000900000800aa3e", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="780202003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004009f6f00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffffff3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400344038df2e000000f9ff040709000000000205ff040000000001043f0600000001003f540200000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400080000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000900040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x3cc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

11:19:43 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xb000)

11:19:43 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x8, 0x1}, &(0x7f00000005c0), 0x3000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00')
r1 = socket$kcm(0x10, 0x2, 0x10)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc88a8ffff000a000400060082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x50140, 0x0)
write$P9_RATTACH(r2, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x91, 0x1, 0x2}}, 0x14)
r3 = gettid()
tkill(r3, 0x2e)
r4 = gettid()
tkill(r4, 0x2e)
setpgid(r3, r4)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0xa000, 0x0)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000680)={0x4, 0x100})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r6, 0x0, 0x0)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000002c0)={0x3, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @dev}, {}]})

[ 3142.648927][T19953] device lo entered promiscuous mode
[ 3142.724642][T19958] device lo entered promiscuous mode
[ 3142.762336][T19952] device lo left promiscuous mode
[ 3142.807928][T19963] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 3142.818327][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3142.824180][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3142.826296][T19963] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3142.845645][T19965] kvm [19962]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3142.867085][T19969] device lo entered promiscuous mode
11:19:44 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xc000)

11:19:44 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000006c0)="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", 0x1000)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x4, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
r5 = gettid()
tkill(r5, 0x2e)
r6 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000240), 0x4)
close(r6)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0, r9}}, 0x18)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90)
write$cgroup_pid(r4, &(0x7f0000000100)=r5, 0x12)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000016c0)={0x0, 0x0, 0x4, 0x0, [], [{0xffffffff, 0x3ff, 0x80000000, 0x10001, 0xfa3, 0x1ff}, {0x80000001, 0x1, 0x10001, 0x6d, 0x8, 0x5}], [[], [], [], []]})
r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r10, 0xc0c85666, &(0x7f0000000480)={{0x2, @name="b5bf78fd7f27ab39c5b224b9d5b5c3279c7d5b5006b930abc4628097b284b8f8"}, "307c97ad94fa1dd96f436942547740569e390720a523767fa515c22f3f959e58", 0x2})

[ 3142.978334][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3142.984216][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3142.991197][T19952] device lo left promiscuous mode
[ 3143.221482][   T26] audit: type=1800 audit(1572088784.409:310): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17885 res=0
[ 3143.330324][T19941] device lo left promiscuous mode
11:19:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r3 = semget$private(0x0, 0x7, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r3, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r4 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r7}, 0x10)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x3])
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000900)="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")

11:19:44 executing program 0:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:44 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:44 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xd000)

11:19:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x80000001, 0x9, [], &(0x7f0000000040)=0x80})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:44 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x25000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3143.501520][T19994] kvm [19988]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x4, 0x12, &(0x7f0000000040)="62aa30c05237e0b509dba8a9141869cac078e74603168f44eec67e503a773be1e180cee6c04c2ce36408cf38ba", {0x1000000, 0x8, 0x30454d54, 0x1, 0x5, 0x401, 0x5, 0x7}})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x20800, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
recvmsg(r3, &(0x7f00000017c0)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/36, 0x24}, {&(0x7f0000001600)=""/124, 0x7c}], 0x6, &(0x7f0000001700)=""/129, 0x81}, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x69e, 0x2, 0x9, 0x9, 0x2, 0xffff})

11:19:44 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x80000001)

11:19:44 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xe000)

11:19:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3143.684014][T20021] device lo entered promiscuous mode
11:19:44 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x80000)
recvmsg$kcm(r1, 0x0, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x7}})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x1, 0x5, 0x401, 0x9, 0x1})

11:19:45 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x9)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x2)
connect$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x1, 0x0, 0x5, 0x5, 0x9, "fa9b4401fb2d733f46b9745612006605a543313808ee56eed671f3dfb53566c3ca1dff017f569d0292f0375b6bf10fe465e5f7409f5497f3e81978f21a782c", 0x1}, 0x60)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/201, &(0x7f0000000000)=0xc9)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)

[ 3143.785023][T20028] kvm [20026]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3144.163260][   T26] audit: type=1800 audit(1572088785.349:311): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17371 res=0
[ 3144.316779][T19995] device lo left promiscuous mode
11:19:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r3 = semget$private(0x0, 0x7, 0x0)
semop(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r3, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r4 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @remote}, 0x10)
r6 = socket(0x100000000011, 0x2, 0x0)
bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x0, @remote}, 0x10)
connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r7}, 0x10)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:45 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xf000)

11:19:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11:19:45 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x24, 0x0, 0x4}}}, 0x18)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0xda})
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:45 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x4e3dbfe8252021e8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}, 0x20)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000009c0)={<r13=>r12, 0x5, 0xa, [0x40, 0x9, 0x0, 0x4, 0x80, 0xa000, 0x1, 0x80, 0x1, 0x1fd]}, &(0x7f0000000a00)=0x1c)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
r15 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r16=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r16}, 0x20)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000011c0)={<r17=>r16, 0x5}, &(0x7f0000001200)=0x8)
r18 = socket$inet6_sctp(0xa, 0x5, 0x84)
r19 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r20=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r18, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r20}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001240)={<r21=>r20, 0x17d}, &(0x7f0000001280)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000012c0)={<r22=>0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1}}, 0x2, 0x2}, &(0x7f0000001380)=0x90)
pipe2(&(0x7f00000001c0)={<r23=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r23, 0x0, 0x0)
r24 = socket$inet6_sctp(0xa, 0x5, 0x84)
r25 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r25, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r26=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r24, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r26}, 0x20)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r23, 0x84, 0x1, &(0x7f0000002000)={<r27=>r26, 0x101, 0x6, 0x5, 0x7ff, 0x5}, &(0x7f0000002040)=0x14)
sendmmsg$inet_sctp(r2, &(0x7f0000002600)=[{&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x6, @rand_addr="80806cdc309872b2dfeb8a4b5c825192", 0x40}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000240)="9d79edf374cd8f2c3a2d57f611f0c2e5d209c4118f23e58cac9225a43298d8b380cb86795c2c0c42c2fb90f185475ae2127c783d682349d92f01dfafa75390c49caf369d2ea3c7b9a5019a0c0e5f5bfafbbec768402c356e5a07", 0x5a}, {&(0x7f00000002c0)="fc51f710a338b7efefa6617f3ff58cf6e4163d552eccad5dfb9351a085497249e92971073fa2235eb8c57282945c9a2eafb9ceb736445c61d0a8cbba4ed259a3c274dd8f5901e36199370e65442d31dba2520173b5b9725ac5404b14108ac655675d132326cba59a1412e71ce3a22a4816e68f7520f1e910b373ff", 0x7b}, {&(0x7f0000000340)="7b655df041676c985c2db04bbabfbd60ad1a72", 0x13}, {&(0x7f0000000380)="b575f3ecefc1752a37089b2ef40080c0dc39352682535b2e4ac9546ee760aeeba5742c4ba24e1eaee71939e02905e07a6d03675ed31116bb0c82134627d7c3f10016bc4fc6fddcb1d0131e980a6b9b27849f0a3f479fc745f2f0403f840b114480d206359b8f00e31b14043745e4b4eda259710893beccf5c4067b40a80a6d5c29f88f2154918fad83cdff5fb7ea2164657fdeac7947756d02439a2896e22f8deb87c293a872ef69a091e9572ad16de0c0349c60", 0xb4}, {&(0x7f0000000440)="7c770683963ad378a93d812329317c5728f732e3cf21853c08b182bc98502c", 0x1f}], 0x5, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x1, 0x8005, 0x80, 0x10001, 0x7, 0x81, 0x80, r5}}], 0x48, 0x4004000}, {&(0x7f0000000580)=@in6={0xa, 0x4e22, 0x3, @rand_addr="75c36bdc0d33451256321ae9a614f904", 0x70000}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000005c0)="5a6de8789c748c458428af9965c0ee1f00e1fcd6171a87b00523e329518d4c47fb0c8242c9f5e00c29ddbb3ee2083dc86c54ad27ecb3872b3187af3e85f72414129617fdbe9e32444ad24b30968e36b14b8057f6045ba38eb9cdb7826f8a436de2bd5d22e18c137bc0bf65716a2aa71d461102da4cad8bef7cb98b225c12bce34533dc410bb29d996962a03cfa122dd197c9a4dc8fb048d8975c75a2d16d0d6be142b0a0e1cc1df504d32fb181f481d7f1aa4cc7fc", 0xb5}, {&(0x7f0000000680)="f382c91a051a0c74e522a7c9ec7c062882f780fad29d75c539e6ddc59db4a69718281ab652514754f1dd461b262ffd062341804416efcd3132de10135440900c9365cef385938e7951d122dce049c376a5e442c1b7f67cb91eb65cdf33f290395a76fca10f35aaceb8d2530374279958e10664e7ca03dde7a2de7e561efad91d0a27170ce1102be9957fb2ecc2edfb4667817d0bd93ccfda7f5a3217fbe5292afd7cfe2520d4f4e667a25b2ccdb1152c84166fda7fbf40", 0xb7}, {&(0x7f0000000740)="3ae7e5424230a3de8d8fcae6cd2a312edf409d0f9e33cbf9d9", 0x19}, {&(0x7f0000000780)="7412dc242095410e74e4bd902e8dac4af75da23caa232bce91c5b4f8eb6ec12464e852b7cb0185338b394cbcee87e1f213f2cdc40e50734a37bdeb440b241eaf1424fecadf408c7701c545f897d3f4a1fcfc76e00c", 0x55}], 0x4, &(0x7f0000000840)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x575, 0x0, 0x2, 0x5, r8}}], 0x38, 0x804}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000008c0)="99ac372ff7ed", 0x6}, {&(0x7f0000000900)="fe5834f7dfb5e86ed33fdcf6969fc144e6e3e13555f7c4df1160899eb5a24e8be6a9f47f38931efb2b2acb4b2cd3df013f93f833e9e752bf95ebcb4274696f7b443655f76545f5ac2121dd8d", 0x4c}], 0x2, &(0x7f0000000a40)=[@init={0x18, 0x84, 0x0, {0x8000, 0xfab, 0x1, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x10009, 0xa3, 0x1, r13}}, @sndinfo={0x20, 0x84, 0x2, {0xfc01, 0x8209, 0x9, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x687}}], 0xa0, 0x14040050}, {&(0x7f0000000b00)=@in6={0xa, 0x4e20, 0x2, @local, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000b40)="42e9177fea79775ca3491c88de4ee348c197edebff8f37b98d8d9d2a82c92ceeab5a7fa8760d35eda47cbbea1098f97b582af2390634417a6786dfe31bd74fd96f7974eb7153ad04801abe8e718d2937643a2dab967efa1ddd926a58e5c207197f0a4d162e61e484d65eea83503235f6375a0f40e0262014d6b03d405eb27d489fec91f74fbd8dd0467164bdae0db21f6b718ac50accf0cd163a4f104377b1795cc822cab9a36296a5a9750370ae215ca986056400d66c9d5b173e8236d25c3b819c420b8e2f57d7b88767bb0a78a8b035d45c46f1bd7cbc", 0xd8}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000000c80)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000cc0)="8201c6c270fc1f5c4ee3a3a6b9b08ad60237a95ef65cd44b79d523e86a17963958adfd8ec5fd83b40887ade81f3d", 0x2e}, {&(0x7f0000000d00)="d6f6a20bd13d2f07d6b4d1ea6cbd515531289b2ee95a373b6d6835e322cadc3a769280cc4952bec8d8616af55af6b5e3d50b581e43471e0d67b5c468301b17bcc9f03adac00c201c8604064b0e9cd5392943616e19ab36d8acfd1e2f67bb026c3e68ddb7a0501baf848f5b97b49c86e4228c3ba0db4daf244638464a57127fd2a54b9fe7c50f8bd60baaf2bbac2d4340a0b33a169a1e4b8808f98c8d7d62367988d5f99fcad095089467bd1533e21881a62d21f448b2078a002db5306007326eca796719fae6aadb30689ac0f6445fda", 0xd0}, {&(0x7f0000000e00)="c78ae0da05951edc29561febfa39a88f2760896fedcceb369b91c5b6d2ccfd31f6be76e5d74ed11b1357868a2e9ff5eb954cc0b629beff19eed11d5e7a19e3729dd462561ae1cfd3caa7a7ec0e0b6d91cd8e9710e472a92428a45048a27876a1a1ae843566f3db4e0794d5d594dbad4d4236c3329785c3590d84b8fa65a012b1d1c8ab0baf533f9294e9391f9e6517efbcedc221430d9aa19aeb51cc9b65b9c108aada5650f0fe", 0xa7}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="33fcfbb415c6bf02d24bb96009e6830cfcddb0da1470a509d02988852505130647ba324463b04dad6c8dd0ea7801b368ae7f0d54af0ab1bb28a93d6d527341cafeefcd0d864001c418d17326941eb54021eae4d8a4bff076ccfd7ed50f06", 0x5e}, {&(0x7f0000000f80)="837170ea55997e682cc3869e5a8f9a1c9551152cc48946596a464dd914fc892f077fce39ca04142e2589a27b139103d64f2ac0f193b173a57a7a5c768f6fe4248e26d2ecd717f637df5a6871d52aedd4cdde8deceae6f3881863d5b27b527f4bd66cfd76f9fe0a8adb46669ece2d839269734ac5eaccb9446ee39652d488d15c431d830ef8b2e2642429fe", 0x8b}, {&(0x7f0000001040)="51c60145d91625fd8fab437ec365c78c422de6860a5a68a22fb25bf451d82d7b8e698c1a3ffc33d426b796b3e97c20a34dfd36b870e7348c2b0ed7759722fb3e3c4aa9284bef9a89f9ab8abd37a67a6df1d18c36aea5cab9354a8440f10ad9576356398fa85b356548fd5e1ccb3914f15b8bc0d1aae82f95fc21bfb82b035347288ac69a0c8e35dda278f5b941e9", 0x8e}, {&(0x7f0000001100)="6f16341be6c2cd1ead167f7a30f195a3b650fcc7814055", 0x17}], 0x8, &(0x7f00000013c0)=[@authinfo={0x18, 0x84, 0x6, {0xc28}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x9, 0x10000}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x800, 0x8600, 0x2, 0x1, 0x88, 0x5, 0x7fffffff, r17}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x136e}}, @sndinfo={0x20, 0x84, 0x2, {0xd47e, 0x3b5dc122140dc2a6, 0xfffff225, 0x400, r21}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x2, 0x608, 0x7fffffff, 0xffffe639, 0x2, 0x978, 0xfffff7b9, r22}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x1, 0x80, 0x6, 0x400}}], 0x128, 0x10}, {&(0x7f0000001500)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001540)="e8d13e7b13ae30afa58c0fe5d393db4a5c0727209fee267ecf90d81d6e31f39cf3ba9172fa71f1a4ad6f59bc10cd8acfcc186ea25161d33d5a381b8bc05c6c4eefa8c74b0a63a866b0af59ed36daa39219e91501c9e61961298929c2abf2b55f90add3242e551847cb96e3a8cf9b0217c0ab74c2a180e3a6ce3162a93e74b0ac9bf756430cff8d7cdd6c0886814bf8b0443e2c99fec40c9241815cd2574f01ae164fc63aeab19917f005285e0ca48dc1937e6426e5f396101de09e07ef8522faebe21c230e6f2d5ee26549a1373661c22070b120710e79549473725d27e44d15", 0xe0}, {&(0x7f0000001640)="3062994719565fbe100180fe7bed7a92b585e9ae33f9c3df319fafc79a260a02c1f02e419bb88c0c0c142cefc029f0779614d2cdf118a43bcadc266dca1b8b960d7ae264f7546290d6de08cdd8a86e7fc698e2ae9823bb18b902f0e4a4970e58a3dd30b80acaa8a6e1eadd495608381393238fb5d88d99350fd3ab1b9788c11e45a24d76c8df96118d4c9ec3a7abcdc25a9d5eb2288229af616c0d3905ef716945b4ec807c559a8b5dd341936e3429761af469c448f0f174a5bc6b865597e8bd61b43d8d30370b4285550888a631d3829cc77b313f6963334d0b48a34246c972b426e9dc3037f31701ac1fd4bbaf9bd08a726477", 0xf4}, {&(0x7f0000001740)="a1cd4df13d51629397d5626994317e3afac703eff14f358e56909519dcdca63ab1ca011a276e770d1368a75e68d4bd15d6f53280d1f9f68412190667105d0ed9ee5ccf5ec4b913507febd720bfd7a8e1ce3b4f3920c708f8abb8df3cbb7bc6e43d6a9a8aec39fb84d8be2ca58583ecd59088e8b0d3d5d5c9e6dc", 0x7a}, {&(0x7f00000017c0)="d3f5206957595bbe312847b42641543f5b649c7e09a3aff6779fafe2be34c8cc4558b8b380be3f3bb6623c3fbccb8f026097dbe5c02ef6dc061d5e13bba6882adbb570254bb93f8f8317fb75807e9dd074f749deab805ffea03eacea8648ce9eb7b960ce", 0x64}, {&(0x7f0000001840)="68195405f7b0f2dfc2fc", 0xa}, {&(0x7f0000001880)="02e80e6064eebb8b14340a8f", 0xc}, {&(0x7f00000018c0)="9c56765dcb6fb306dedd8900e154a54300221945a1818f8f2c969a6ffbd6b3da0c5216059e079efcc841412e31cde1ce99bd6e8fdbbaecdc34f85c3d6e86b45b1cc67b557bbddb13a7208933c5f3c3587a26933021e529c571f0fa5074534a1a3ef5209c4f279ffd290e51265611da85f53eeb9805dab48d3a5ea7dad87f47cc073038b04afae0d78bd60a19561c5f012c7e83491be722a0dd", 0x99}, {&(0x7f0000001980)="4558009f675b2f107a110335bc5ca0", 0xf}], 0x8, &(0x7f0000001a40)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x2b}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x5a01, 0x80, 0x7ff, 0x6c0}}], 0x68, 0x3e7eea2d2e89ba7b}, {&(0x7f0000001ac0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001b00)="cbee1a8c3bb213e6175f950fa508442685af7810221350d557014001b586e445edf770970acbff982a20d2474e48d1451ae9bc8e9f9a396a4cf1e1d3279f32e1f560615b9fabcfda209890bc72", 0x4d}, {&(0x7f0000001b80)="141ca40611d222835e915be1386da679cb5cc9e54f112a58ab9d1a85016c006d6426c718d0818379c19ad3598f82f28d45", 0x31}, {&(0x7f0000001bc0)="11ec84b5f68dbe272e03fc4c8c4ff65812067de8c7f5e1bd10ae96941dc139b109a9417ef2f1913e1b7765f64e5efcdd48022e38a18cb5e8b8e6ee39cfdab69450d8820aafed9c995b158704e653281c75c51368fda02f7d25fe14fbac397d9884e9703efb53daac51328715edb3ac6be834bee07051d0ed4f8fdafa8c36fc614d139636431b2755a005ee36014bac59c8f1155026d42b241205a0200c46dd6fed2831aee813a7c82b903c556b39b1af278de2fb0eaa9f7017c2401b23c5691c8c40d9e554d339af71de5993afe3d96cc3b900d5d2d18b707f6f43e83d1705b26776c0de0f", 0xe5}, {&(0x7f0000001cc0)="71e4cf401622d326b0bec5303789271a665511436d863f0dba521112a6573442546536cd9998f84783188a817e38ceed59fbe5cbe54abd8634ccf3591cc0511e2b9663f1b1e33c8f2cc7845526137bc4040e3abd7175f22cfe2e2cf3a99186065d0b310977", 0x65}, {&(0x7f0000001d40)="e477787f33bd3fc3ef6df00cf9243ec1214f79a0a25b480a56a445e002dc712de37ec948c9d25ef4036e9289426b36f587d0575fbe384adf32a7907962e7660ddc5f17ccf3a0bbc015c0aed7c593d43871ac", 0x52}, {&(0x7f0000001dc0)="fe73a64c382050b5f4f7f10b623da7b0da00075b201598a77b63b445bf490c8aa7bbd3e575d06d75d61b051313a236d7e0a6f945ef2c2481ca6f141fd69f173467e13078c395c997b62827c6b74b18df4f747c", 0x53}, {&(0x7f0000001e40)="bc3786b9ddf1b057ef510ad07563389a2b2c2a15dfa7f3bc5d03882a5ce287472c2efbf398f353f3ab", 0x29}, {&(0x7f0000001e80)="415af42cf9e88a51cf58575052eb78a28a8cd20f2f4e7ac88ca0572030f240987c30047b9ee3388dc2ad81a8ed8e7dea1588509876ebb9a90c3e692d6e0df1e56dc6ecba7c5cf07d51c89e374096841858b9ec3863a23c8e7bd625fdbb3a5a10796b6864e1e83e487ff7b608f8eb732102c521e15f54187cb7e55e69c6ba903917d59cc5942bedaf4afe84141497837c99a46133cd89328d7bda7ba138fa8b87513ae336024b53e74be9039fb95e5a940b63bf705da472376919aa49e652fe3646ff34262d702e2338063427c6ec5f8cf33518e4a10f75261650f866332b8718a00d29aa95f5e935e16ad4ab659af07ae838a354", 0xf4}], 0x8, &(0x7f0000002080)=[@authinfo={0x18, 0x84, 0x6, {0x1f}}, @sndrcv={0x30, 0x84, 0x1, {0xf7f3, 0x4, 0x2, 0x8000, 0x1, 0x5, 0x3f, 0x3, r27}}], 0x48, 0xc0988775b1cdc69b}, {&(0x7f0000002100)=@in6={0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000002140)="b9cfb88fc49574cddfad157f70022e470f6f4d987867954ff54a6e4daf2c3e52b4bd34a9c2d412f8c5a563c529d95fd4126f18584d0631039a2dd104d1e6f12b9255b4f510c40a7b7ce4892d1b657345783eebb6bf6fe2a1ddb5149fa0380a0cf3e15490aa7ae6adaee58f5d76ed342e9c46607a45dcfc90edd6f47a0a7c3e5bd7ac137bc0092c6c3e0ec3347b88b092955003952a4861ea505e272481bca7c894f9209ab4f4c59253f15fffde2e1f90c8505e495d8cb077539a98f4e66e77c76c8da1c8", 0xc4}, {&(0x7f0000002240)="a8482eaccb869836e978542800680e89b2fd5da0a5d40594f0e8dedaf69f23c26c67c57baf637a8eeaf3f1f762fead5805e08fab3b6f8cb23c383cf6c88f0972f66890071180ba98eab2e0359dcff6d279cae9f8eee2acd3ddc744c4bc92db92db2134fccfee90a2fff7", 0x6a}], 0x2, 0x0, 0x0, 0x4800}, {&(0x7f0000002300)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002340)="08609ba81ecf28f62370d41c743363d171dcad9c5baca22c46ce291b3df19dc2ad9b497889f1891ce7955885467554c102f80516306f4609cd3157779f4d971686042a05b97401a6b23870a94048e1094d11ad1a5b3a3a548b95d77586b12a688952635c8680a9073fc5176c1736c6cdda", 0x71}, {&(0x7f00000023c0)="2c6fb9b4a0ef1ba449357f1f4fe306325a38fde89a884e988d5b0ad380309f2502753c48c64d607437d617f828d31fa1e67d0794f2d8a0f9f009909369ed3526a9e5a2bb3356ea800cf8ee4017e62043b8526fb6731a62dde35ecfafb0d47befc74bb3adee2d4bb9d7c5e11c6ca031937c2894ccb5db9f0945c49db77a9652e59c1a3a5c177908c5a4e2c1d75b8a297f7e02489b67c1ad7b5876f5535d3161424fc593e2c6dc0099b2e800437f875c1d9e89f3b29c9466a183d341930d1ce8f9a5c8433dd91b3f1a59586e1a6665", 0xce}, {&(0x7f00000024c0)="8f435978e589a57dd05132435809fcecaa9f94fc672e816e4bc45deed63ec880cf7fb393774c96e46952071e9ef10395918d9de99355c1e7fee374b369d00dbc619e55fa016a618146c56df6445e10ae9994d495ad030fa1bac748e243641baeb308d298cae28abd99c1675650f7a15d8d459c8e137355edb59ce484c9ec1455c8756b0b92a0480dbc6f42dab0db07b13019db4315e351f64e0717dd5c9f0188fe342c01172db4c86178df790d46069910197daa8fd13f2d0731057df646b5602b052e4e0edc0773fde7a26707c5980b303e80d75e893c84cb6d5ee36443e1fce7b046c2fc79d08f8562cb2c78753e", 0xef}], 0x3, 0x0, 0x0, 0x1}], 0x9, 0x80)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040))
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:45 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x40000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:45 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x4, "c4c3aedaf98df4a8"})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
timerfd_gettime(r2, &(0x7f0000000540))
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000000)={0x200, 0x4, 0x8, 0x3, 0x1, 0x28, 0x3, "e7820cc983c633f38cd99ca9bbbd1efe8294f1a8", "49b44d68ef2fd1fb2875a8b9835757de39950af0"})
openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r5, 0x0, 0x0)
setxattr$security_smack_entry(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.SMACK64EXEC\x00', &(0x7f00000004c0)='vboxnet1posix_acl_access]\\,)eth0#\x00', 0x22, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)
r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000200)={0x0, @capture={0x2000, 0x0, {0x6e, 0x1}, 0x200, 0xaa}})
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000400)={0x9, 0x2b, 0x7, 0x2})

11:19:45 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x72698989)

11:19:45 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000240))
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x999ffa486b0e3c6, 0x3, {0x0, 0xe47}, 0xf0000000, 0x5}})

11:19:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x194)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)=@newchain={0x570, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1d, 0xfff1}, {0x10, 0xfff2}, {0xa, 0xffe0}}, [@TCA_RATE={0x8, 0x5, {0x5, 0x93}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x538, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x4e8, 0x1, @m_police={0x4e4, 0x20, {{0xc, 0x1, 'police\x00'}, {0x480, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x557c, 0x5, 0x6, 0x6, 0x7, {0x35, 0x2, 0x1, 0x7fff, 0x9}, {0x5, 0x2, 0x5, 0x7, 0x401, 0xcea}, 0x8, 0x9, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x72f1, 0x20000000, 0x200, 0x1ff, 0x9, {0x3f, 0x0, 0x7, 0x3, 0x1, 0xfffffffe}, {0x74, 0x1, 0x9, 0x1ff, 0x3, 0x3}, 0xffff, 0x3, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0x7, 0x0, 0x8000, 0x1, 0x7, 0x80, 0x8000, 0x200, 0x7, 0x1ff, 0x9, 0x3, 0x7, 0x8, 0x10001, 0x7, 0x4, 0xffffe890, 0x7, 0x8000, 0xd41dc55, 0x3ff, 0x7f, 0x4, 0x8, 0x2, 0x80, 0x10000, 0x9, 0xc000000, 0x1, 0x5, 0x10001, 0x1, 0x10001, 0x1, 0x8290, 0x3, 0x0, 0x4, 0x5, 0x81, 0x25c4, 0x80000001, 0x61, 0x0, 0x0, 0x9, 0xffffffff, 0xfffffffc, 0x1, 0x4f, 0x6, 0x9, 0x80000000, 0xfff, 0x4, 0x80, 0x81, 0x7, 0x0, 0x2, 0x2, 0x2, 0x4e4, 0xd5c, 0x10001, 0x5d9, 0x3, 0x7, 0x3, 0x7ff, 0x7fff, 0x20, 0x3, 0x6, 0x5b, 0x4, 0x2, 0x80000001, 0x7f, 0x6f1, 0x1, 0x4a72, 0x3, 0x7, 0x9, 0x8, 0x4, 0x4000000, 0x9, 0xffff, 0x1, 0x8001, 0x7, 0x1, 0x1, 0x100, 0x1a8, 0x1, 0x7f, 0xbb, 0x7, 0x80000001, 0x2, 0x6, 0x1, 0x3f, 0x81, 0x8, 0xb3, 0x651, 0x1, 0x8001, 0x400, 0x6, 0x8, 0x800, 0x1, 0x9, 0x83d, 0xd0b, 0x100, 0x3, 0x5, 0x5, 0x5, 0x8, 0x6, 0x6, 0x6, 0x3, 0x7fffffff, 0x3, 0x3f, 0x7fff, 0xffff, 0x2, 0x5a4d6052, 0x5, 0x5, 0x6539acea, 0x7fff, 0x2, 0x8, 0x395, 0x8, 0x20, 0x3, 0x3, 0x6905b19d, 0x8, 0xfffff000, 0x9, 0x200, 0x3, 0x2, 0x0, 0x11e, 0xfffffffb, 0x5, 0x6, 0x7fffffff, 0x100, 0x8f1, 0x4, 0x3a87, 0x3, 0x400, 0x4, 0x6, 0x6, 0x101, 0x4, 0x0, 0x9, 0x80000001, 0x8000, 0x7, 0x7f, 0x71, 0x5, 0xeb, 0xfffffffb, 0x1, 0x9bb, 0x9, 0x1, 0x2, 0x5, 0x3ff, 0x2, 0xffffff64, 0x8adc, 0xed3, 0xffff403b, 0x6, 0x5, 0x8001, 0x3ff, 0x7, 0x1000, 0x1, 0x1558, 0x1ff, 0x4f, 0x9, 0x1, 0x7fffffff, 0x800, 0x9, 0x80000001, 0x80000000, 0x5, 0x0, 0x6, 0x10001, 0x7, 0x2, 0x7, 0x9, 0x80, 0x4, 0x1000, 0xffff, 0x7, 0x1ff, 0x8, 0x1, 0x7, 0xa3, 0x40000, 0x6, 0x0, 0x35, 0xc8b5, 0x6, 0x80000000, 0x1, 0x10000, 0x87c0, 0x7, 0xfffffff8, 0x5f800000, 0xffffffff, 0x6, 0x777, 0x9, 0x5, 0x80000000, 0x4af, 0xfffffff9, 0x3, 0x4]}]}, {0x50, 0x6, "d3610ae83f48b94a15d41783a85ae2b48a5836f4e679465152684a8b1f94e34f0f03f0b1b3e21d9bf26fd637f88afe5d58a5b69693b879c359b600e29870dba6370344a32348fd76a5"}}}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0x5}}, @TCA_BPF_POLICE={0x10, 0x2, @TCA_POLICE_PEAKRATE64={0xc}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x570}, 0x1, 0x0, 0x0, 0x4c000}, 0xc97caf95179e2cd0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
lookup_dcookie(0x5345f055, &(0x7f00000000c0)=""/152, 0x98)

11:19:45 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3f1)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000))
accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x7fffffff}, 0x10, 0x80000)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x800, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r4, 0x0, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000100), 0x12)

11:19:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x40)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0xa})

[ 3144.777541][T20091] device lo entered promiscuous mode
[ 3144.839571][T20089] kvm [20088]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3145.103382][   T26] audit: type=1800 audit(1572088786.289:312): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16833 res=0
[ 3145.342822][T20070] device lo left promiscuous mode
11:19:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000080)=0x14)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x0, @remote}, 0x10)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:46 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x7ffff000)

11:19:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x9b0000, 0x7, 0x46, [], &(0x7f0000000080)={0x990a69, 0xbb6, [], @p_u32=&(0x7f0000000040)=0x8}})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})

11:19:46 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180), 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'erspan0\x00', 0x200})
r9 = gettid()
tkill(r9, 0x2e)
ptrace$pokeuser(0x6, r9, 0x6, 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="2900d100e964ec8e645e8907c7ebdbb30901e52391da1c3d6d60c3288b34774a3b139a005269adc2e05c0e22000000000000d1836adef63d5ee1e85e3f067ca1333e4d8ef46397405d1aabcb34dabae6a90c3c98bae83be78907a38848b1d636f4db4db2069edf753bef9634a1edd9db7e9a12934c08af92af6761536a549d58489a8a007345e281a7c94a4602197f076f9b1178e2e369603f08a74d97253c531c2ef399715b030abe10bd84bd30fcce95d713cf69e8bbe1e842edcb985376a3fe909066e8025a21589bcb10ba8d530573fa996688175f1e75d1f7bcf4dd043e9a923bf93820247217a599c52d1af4e30c063d982a7be7ea966b02691f211f583ba2e94274dc468d05aa93d223cf"], 0xd9)
r10 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000100), 0x12)

11:19:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9d)
fcntl$setstatus(r5, 0x4, 0x2000)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:46 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x5c000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3145.492052][T20114] kvm [20113]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:46 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)={0xffff, 0x7fffffff, 0x1a})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x3, @pix={0xd4b, 0xfffffffe, 0x53424d56, 0x5, 0x2, 0xfffff5a3, 0x6, 0x4, 0x1, 0x2}})
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200)=0x6, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={<r8=>0x0}, &(0x7f0000000280)=0xc)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000002c0)=r8)

11:19:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x800, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x3, @pix={0x100, 0x7, 0x44495658, 0x7d05db48b1cc0867, 0x7, 0x1, 0xc, 0x8853, 0x1, 0x8, 0x2, 0x1}})
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000380)={0x1, 0x7f}, 0x2)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40600, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x101040, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000003c0)={r8, 0x4}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r5, 0x9}, &(0x7f00000001c0)=0x8)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @output={0x1000, 0x1, {0x406, 0x8}, 0x4, 0x3}})

11:19:46 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {}, 0x0, 0x9}})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

[ 3145.699475][T20138] device lo entered promiscuous mode
11:19:47 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000180)=0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)

11:19:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1ff, 0x0, 0x3f, 0x408], [0xc1]})
r5 = semget$private(0x0, 0x7, 0x0)
semop(r5, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2)
semop(r5, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r6 = geteuid()
r7 = getgid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8)
r9 = getgid()
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000100)={{0x9, r6, r7, r8, r9, 0x23, 0xfff9}, 0x23, 0x7ff, 0x80})
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000000))

11:19:47 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x65, 0x5, 0x2})
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {0x4, 0x7}, 0x2f, 0xaa}})
r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2)
ioctl$TCGETX(r1, 0x5432, &(0x7f00000001c0))

[ 3145.938352][    C1] net_ratelimit: 8 callbacks suppressed
[ 3145.938360][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3145.950034][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3146.079607][   T26] audit: type=1800 audit(1572088787.269:313): pid=20115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=16930 res=0
[ 3146.099305][   T26] audit: type=1800 audit(1572088787.289:314): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16881 res=0
[ 3146.108344][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3146.124431][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3146.337827][T20123] device lo left promiscuous mode
11:19:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000080)=0x14)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:47 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0))
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:47 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0xa})
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000200)="efaa4c391b9bd437939d90f8b073e4a48dcffccd47f6990c85e2fce9024a36b9677e2c9213694e1fe7b51eb49eaff0b34f520c5250c80d1ab681499534e801b0e5c8b9a2a85a630cff04a478adad657955f9ddf0f841ba94dcf846f0d26b5880df657ceaab3b1f2fa12e090ccca55e64e79a20245dacad3f89daa826cc1ef7c7e4839027b1ff798c730940aed0fc4fd1c5718a33174130da4a5af16527142eb958dba3f7c7a2d14c6cf24839", 0xac, 0x800, &(0x7f0000000080)={0xa, 0x4e21, 0x80, @empty, 0xe5}, 0x1c)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040))

11:19:47 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x1000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:47 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x484181, 0x0)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000140)=0x4)
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:47 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000180)='cgroup2\x00\x8f8a\xce\v\xe7H%\x9a\xb0\xb7\xe7\xf4\xc9\xcd\xa2\x9b<v\xb9', 0x200a002, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:47 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:47 executing program 2:
recvfrom$llc(0xffffffffffffffff, &(0x7f0000000380)=""/255, 0xff, 0x40, &(0x7f00000002c0)={0x1a, 0x335, 0x1, 0x5, 0x2, 0x70, @remote}, 0x10)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x1, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00F\x97\xb1\x97\xcf\x8d\xb6\x03\xfb\xaa\x156\xd8O3A\x9e\xb8,s\x0e\xa7\xe9\xc5hP\xed\xcae\xb9\x19\x06\xb7d\xa1g\x8ba\xeam-jO\x1f\xf3\xb3&\x90g\x94J/\x19aM#\xbc\x98\x9b\xc6vz?rj\xef\'/\xd9\x8e\xe2wJ83\f\x12\xc7y\xebF\xef\tn8\x96\x87\r&\xd6\xa24@\xc9;\"\x1c\\\x85\xbc\xde]\x86\xa3\x8b\xca;C\x06\x9a\f\xf0\xb6\a\xe3\xb6i\xff{\xd6h\\g\xe4|C\xc9\x13Q\xa2\xcc\xfe\xe3\x04\xd5\x03pm\f\x9c\xdan\x10\x94\xcd\x95\x86!\x03\xa26\x87\xaa*\xb9\"\x8e\n\x9f\x90\fg\xf5\x84\xb6\xf4~c\x8d=\xe0>\x9b\xe5X\x1a,\xd2TC\xd3v\x9c[-.*\xb9\xbc\xa7i\x8e\x7f\xd7\xf1\xe0\xd4\xb63\xe3\xd4S\x018%\x9aC\xf5N\x06\x19\xae\xcdo\xa2\xd0\x98\xc9k\xf1\xa2K[\xf3$=\xa4k\xf2\x83\xbc\xb4\xed\x1eR\xf8\xd9\x12\xc7\xfe\xaa\xa6\xf6$\xb0!\n*\xa8l')
read(r1, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2)
ioctl$int_out(r2, 0x5460, &(0x7f0000000280))
r3 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x4)

11:19:47 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3146.666695][T20193] device lo entered promiscuous mode
11:19:47 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r1 = gettid()
tkill(r1, 0x2e)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='statm\x00')
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x229)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r4, 0x0, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000100), 0x12)

11:19:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000000))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022, 0xfffffffffffffffe], [0xc1]})

11:19:48 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3146.940736][T20209] kvm [20207]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3146.978339][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3146.984185][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3147.138321][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3147.144203][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3147.155527][   T26] audit: type=1800 audit(1572088788.329:315): pid=20181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16881 res=0
[ 3147.320030][T20178] device lo left promiscuous mode
11:19:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:48 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
sendto$unix(r4, &(0x7f0000000180)="c9f75d2be1c399d4f7c25f5e21e62f2a4e9740a24284b531e8cd1af8914fc93119d4c5e93cb5063cb38c3fa09031f00d75bfa527c61adab7bfb24cbb9338ecbb33f406e20f785ffa47839215fe073618ded743fc46c8b769b6caac13b5b7f756d46a27d082e5123acc53cada67bc7ebe4732c5e0a8a8ede0aa44a7397366f2e968fa276a7742a2551bff3619250f12e0e4682fe4101d20b54e5632f434ca00efb14b11f55211410eb8e13c895aebfa68a0b0ef074979ff6e1dfa3635c4c48bf43126b4e7a4e7a05c3b944a1e3762c655bfa317f4dde0ae03f36857256f416caec122fdbedad8aadf02d867e82d65879dff98f2d1", 0xf4, 0x24004001, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:48 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)

11:19:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f00000000c0)={0xffffffffffff8000, 0x2, 0x3c7})
r5 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:48 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x100000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:48 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
r1 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x4, r1, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='\x02\x00\x00\x00\x00\x1d\x00', 0x400001, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
fstat(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000080)='./bus\x00', r2, r4)
close(r0)
r5 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r6 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10001, 0x80000)
ioctl$TCSBRK(r11, 0x5409, 0x8)
r12 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f00000000c0)={"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"})
ioctl$KVM_SET_MP_STATE(r13, 0x4004ae99, &(0x7f0000000000)=0x100005)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
write(r14, &(0x7f00000001c0), 0x526987c9)

[ 3147.475619][T20227] kvm [20220]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:48 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)

11:19:48 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000180)='cgrofp.threal{\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setregid(0x0, r2)
chown(&(0x7f0000000000)='./file0\x00', 0xee00, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)

[ 3147.540038][T20229] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
11:19:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101020, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)={0x5, 0x1f, 0x81, 0x0, 0x3, 0x40, 0x81, 0x8, 0x9, 0x3, 0x6, 0x7f, 0x0, 0x716, 0x8, 0x3, 0x2, 0x1, 0x81})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:48 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f0000000000)='./file0\x00')
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x47)

[ 3147.738609][T20255] kvm [20253]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:49 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

[ 3147.801115][T20260] device lo entered promiscuous mode
11:19:49 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='iso9660\x00', 0x4004, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x32384d74675923e1, &(0x7f0000000200)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
r4 = getuid()
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r6, r7, 0x0)
getgroups(0x2, &(0x7f0000000440)=[<r8=>0xee01, 0x0])
r9 = getgid()
pipe2(&(0x7f00000001c0)={<r10=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r10, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={<r11=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r11, 0x10, 0x0, @ib={0x1b, 0xaa5, 0xf593492d, {"4b636ae60f85feabb4fb5a266eff0fc3"}, 0x2, 0x7, 0x3}}}, 0x90)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
setregid(0x0, r12)
r13 = getgid()
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x1, r4}, {0x2, 0x2aef9dd32a2d06d4, r5}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x8, 0x2, r8}, {0x8, 0x2, r9}, {0x8, 0x7, r12}, {0x8, 0x1b3a94aec397129a, r13}], {0x10, 0x6}}, 0x5c, 0x2)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3148.018326][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3148.024371][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3148.193033][   T26] audit: type=1800 audit(1572088789.379:316): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17153 res=0
[ 3148.362883][T20236] device lo left promiscuous mode
11:19:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
socket(0x100000000011, 0x2, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x144, 0x0, 0x40000122], [0xc1]})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x10000009e)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum})

11:19:49 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:19:49 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:49 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x200000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:49 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x526987c9)

11:19:49 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:49 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000100)=0x36)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x5, 0x706, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000000), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x8, 0x200, 'hsr0\x00', 'veth1_to_bond\x00', 'batadv0\x00', 'vcan0\x00', @empty, [0x0, 0x7f, 0x0, 0x0, 0x7f, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xbe, 0x11e, 0x14e, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x4}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x11, 0x1, 0x60, 'veth0_to_bond\x00', 'bond0\x00', 'veth1_to_hsr\x00', 'syzkaller1\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="f6fa4092363e", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x196, 0x196, 0x1c6, [@comment={'comment\x00', 0x100}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x4, 0x67532f6afddf4dd8, 'veth0_to_bond\x00', 'veth0_to_team\x00', 'teql0\x00', 'veth0\x00', @dev={[], 0x27}, [0x0, 0xff, 0x0, 0x80, 0xff, 0xff], @random="2b231b8e1498", [0xff, 0xff, 0x7f, 0x7f, 0xff, 0xff], 0xae, 0xae, 0xf6, [@time={'time\x00', 0x18, {{0xdf77, 0x1, 0x407d, 0x148a5, 0xfffffff7, 0x80, 0x2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6, 0x0, 0x81}}}}, {0x5, 0x42, 0x6004, 'caif0\x00', 'nr0\x00', 'lapb0\x00', 'veth0\x00', @broadcast, [0x0, 0x7f, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x7f], 0xe6, 0xe6, 0x15e, [@time={'time\x00', 0x18, {{0x8, 0x800, 0x26f2, 0x3f55, 0x2, 0x0, 0x1}}}, @mac={'mac\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xfbb2cab1c6c59fb3}}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x80, 0x7fff, 0x5, 0x0, 0x0, "56ecff6486b0abca63c727a160960a0790f30373217f30f8088c8bf5ffa8a18b4f9431f85224b6cb47d682db34b7a7cc01496d4b4781f01c7799e24817990fea"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0x8809, 'veth1_to_hsr\x00', 'batadv0\x00', 'veth0_to_bond\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x7f], @remote, [0x0, 0x0, 0x7f, 0x0, 0x101, 0xff], 0xae, 0xae, 0xde, [@connbytes={'connbytes\x00', 0x18, {{0x1f, 0x4, 0x1, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x77e)
recvmsg$kcm(r3, 0x0, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)

11:19:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x18)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x100, r5, 0x980, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdc57}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x70}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10000840}, 0x4000001)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x4)

11:19:49 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

[ 3148.743851][T20312] device lo entered promiscuous mode
11:19:49 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x4, 0x1)

[ 3148.774577][T20311] kvm [20310]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:50 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1bd8)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="7d272a996fb5af2439cd64d643e6696d3a131ad40744406635a435aba08048d1f34de85463842d5d28bf223622a5ca63fa4feac1a77b9ec3209307cf01ef513df4d895bab66a8f711d81ed21f404f72b9d0bdb", 0x53)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3149.129614][   T26] audit: type=1800 audit(1572088790.319:317): pid=20282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="cgpoup.events" dev="sda1" ino=17089 res=0
[ 3149.156338][   T26] audit: type=1800 audit(1572088790.319:318): pid=20292 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17009 res=0
[ 3149.381107][T20293] device lo left promiscuous mode
11:19:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
socket(0x100000000011, 0x2, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:50 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:50 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xc992ed07c8791706, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40c000)
connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x4, 0x1, 0x4}}, 0x2e)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000001c0)={0x5, 0x8, 0x1, @dev={[], 0x23}, 'bond_slave_1\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3f, @remote, 0x2}, @in={0x2, 0x4e20, @multicast2}], 0x2c)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000240)={{0x0, 0x0, @identifier="bd5b5770c4f3f839cc78b55d5abb07e0"}})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:50 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0xa4)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$PPPIOCDISCONN(r1, 0x7439)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:50 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x300000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:50 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4c0100, 0x0)
ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)=0x80000000)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x119000, 0x0)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r3, &(0x7f00000000c0), 0x0, 0x80fff)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0x526987c9)
syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2)

11:19:50 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x2)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:50 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, {0xf0, 0x80000000, 0xf}})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={<r6=>r5, @in6={{0xa, 0x4e20, 0x4, @local, 0x5}}, 0x6, 0x1, 0x9, 0x7, 0x64}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x7a, 0x1}, &(0x7f0000000280)=0xc)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x6})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$RTC_WIE_OFF(r9, 0x7010)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x4000)
arch_prctl$ARCH_SET_GS(0x1001, 0x8364)
ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0xfffffffffffffffd, 0x42000022], [0xc1]})

11:19:50 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:50 executing program 1:
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

[ 3149.732144][T20367] device lo entered promiscuous mode
11:19:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2000, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3149.904532][T20379] kvm [20376]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3150.098642][   T26] audit: type=1800 audit(1572088791.289:319): pid=20352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17025 res=0
[ 3150.379550][T20348] device lo left promiscuous mode
11:19:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
socket(0x100000000011, 0x2, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:51 executing program 1:
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:51 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0xc19dcc9876bb50f, 0x4, {0x2}}, 0x18)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

11:19:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x3, 0x8, 0x1, 0x4})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:51 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x400000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:51 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="700dae6e7d8e077a8544f10a10f6b932e09d50ca718b390e776ad69b85273909241bccf7e56bafa8a5500f0db4ea50a4ec5f9f867170b9b1a3ecd271bbe00e1ae6"}, {&(0x7f0000000200)="491cba72ed944992234311cadd1d5a13be0c819f0845b5ee84a50e1c9466fde4423210f8f7438ffeb2abd8f56c4cce491571ae19572f4339a0df3c1d8cb608cec11c4092caefc5a737a45d5903a071fb53dae5c2838cdc18d9f817cfc54c1ccf"}, {&(0x7f0000000280)="e42c0bb33b5a0d20255c928f821c1b83e4626fd238791f2552ba43829856fdf0985c17e98ce1e816a9db101849dec7fe0c90e832e0a0874e13af4f2453809ef1ff0d3e1d7e1dba54c2c494b37cf93bd0f4b55380f212f63b07ee7b415e67cd5e703c393cba998fc675fc885df431da57fb9f3c797e1e9fb8ecb9eb4a83cad088b7da76faf6"}], 0xc5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xe0587e77c4e9435e, 0x11, r0, 0x0)
rename(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000080)='./bus\x00')
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0x2eae6ac2)

11:19:51 executing program 1:
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

[ 3150.525533][T20395] kvm [20389]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:51 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
getpgid(0xffffffffffffffff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000180)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='gfs2\x00', 0x1042031, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4)

11:19:51 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
pipe2(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x200000)
r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0x526987c9)

[ 3150.678986][T20418] device lo entered promiscuous mode
11:19:51 executing program 1:
mkdir(0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:51 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x2, 0x4], [0xc1]})

11:19:51 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)

[ 3151.111961][   T26] audit: type=1800 audit(1572088792.289:320): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17041 res=0
[ 3151.138411][    C0] net_ratelimit: 14 callbacks suppressed
[ 3151.138419][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 3151.150207][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 3151.298329][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3151.304160][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3151.332882][T20398] device lo left promiscuous mode
11:19:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:52 executing program 1:
mkdir(0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:52 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000180)=0xc)

11:19:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x81000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, r3, r4, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setregid(0x0, r5)
r6 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$chown(0x4, r6, r7, 0x0)
syz_mount_image$hfs(&(0x7f0000000800)='hfs\x00', &(0x7f0000000840)='./file0\x00', 0x4, 0x7, &(0x7f0000001b00)=[{&(0x7f0000000880)="6a6c3e908f3a1709dbd394a0c680f0a5933d5d865cdcbb31a3d981edbefd", 0x1e, 0x7fff}, {&(0x7f00000008c0)="5f337a090e649f2725e984ce500ed3c637dad75e8a261c7ede33927f480533", 0x1f, 0x7ff}, {&(0x7f0000000900)="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", 0x1000, 0x81}, {&(0x7f0000001900)="acf8d489d8a19c3d5eaa61bc7fbace0a193dcd11cc4463905e0632c45d305fb761d65db3b974903b013a1aca47c050b755861c52fe39c2b9077f6835eacfc4160e638043fc99e58ebd05dcd12085cd54db31c6a1d9da2c4fe2b9a9b86ed8755d5dc31ecf2e770779f29d12454c67bfe2a1ee50916dfc5fc25d859918c94b7c97a85696767c3693437af9e90b0ceddc1d5e98f13bc98449db589975662f5db136d32cf2aa5c0a56d7b8866b183787e6dc1c0085c69f51679dc5f3778315f24950bdcef16769622b76ee5428c583b8430529e0bc00dfa533f5a3", 0xd9, 0x1}, {&(0x7f0000001a00)="5222e9ec1de348a0a2b59710f63e1cd6110d4a5e385032e86fa67a5b54dec129a6233c0a2d0f74681515fca2727bf2ec2bd0f037aeaef2c3ed780f05bea7aa41e990a54141d7e22c2e6081f7c79dd39de14628e9b9a674", 0x57, 0x3f}, {&(0x7f0000001a80)="3cd5c0d7ffc8211861a201eaffc2383803c487eb", 0x14, 0x100}, {&(0x7f0000001ac0), 0x0, 0x37}], 0x2000000, &(0x7f0000001bc0)={[{@part={'part', 0x3d, 0x101}}, {@dir_umask={'dir_umask', 0x3d, 0x1000000000000}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}], [{@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r7}}, {@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}, {@dont_measure='dont_measure'}]})
r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4002)
recvmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/99, 0x63}], 0x3, &(0x7f00000004c0)=""/232, 0xe8}, 0x40000222)
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r9, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
pipe2(&(0x7f00000001c0)={<r12=>0xffffffffffffffff}, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f0000000680)={'filter\x00', 0x0, 0x3, 0x8, [], 0x3, &(0x7f0000000600)=[{}, {}, {}], &(0x7f0000000640)=""/8}, &(0x7f0000000700)=0x78)
recvmsg$kcm(r12, 0x0, 0x0)
r13 = accept4$inet(r12, 0x0, &(0x7f0000000000), 0xc00)
setxattr$security_smack_entry(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001c80)='security.SMACK64IPOUT\x00', &(0x7f0000001cc0)='appraise_type=imasig', 0x14, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8)

11:19:52 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x500000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3151.516587][T20450] hfs: dir_umask requires a value
11:19:52 executing program 1:
mkdir(0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

[ 3151.556757][T20450] hfs: unable to parse mount options
11:19:52 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x2010086, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x2e)
r3 = gettid()
tkill(r3, 0x2e)
r4 = getpgrp(r3)
openat$cgroup_ro(r1, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000040)='\xe6\x02\x00\x14\x00')
read(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)

[ 3151.610133][T20458] kvm [20444]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3151.666152][T20468] device lo entered promiscuous mode
11:19:52 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:52 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="010826bd7000fcdbdf2525000000100001006e657464657673696d000000100002006e657464657673696d30000008008900", @ANYRES32, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673696d30000008008900", @ANYRES32, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673696d30000008008900", @ANYRES32, @ANYBLOB="100001006e657464657673696d000000100002006e657464657673690000000000000000", @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
pipe2(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=<r7=>0x0)
r8 = gettid()
tkill(r8, 0x2e)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xdc, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r7}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, 0xffffffffffffffff}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x3}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r8}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40800}, 0x10000140)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200329bd7000fddbdf250e00000008000500000000802800030008000800040000000800010000000000641d7c1b20e0dc90acf04e31cf2c0001000800050003000000080009007000000008000b0073697000080004004e2000000800010000000000100005006800"/114], 0x78}}, 0x802)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r9 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100)
pipe2(&(0x7f00000001c0)={<r10=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r10, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000380)={0x2})
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=<r11=>0x0, &(0x7f0000000140)=0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000001c0)={r11, 0x84, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x971, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @rand_addr=0xfffffffa}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @local}, 0x4}, @in6={0xa, 0x4e21, 0x2, @remote, 0xffffffff}]}, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
write(r12, &(0x7f00000001c0), 0x526987c9)

11:19:53 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
r3 = gettid()
tkill(r3, 0x2e)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000100)=0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r6=>r3, r4, 0x0, 0x5, &(0x7f0000000000)='eth0\x00'}, 0x30)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x4100, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000200)=r6, 0xfffffffffffffd9c)

[ 3151.827672][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3151.831771][T20458] hfs: dir_umask requires a value
[ 3151.865521][T20458] hfs: unable to parse mount options
11:19:53 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:53 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x9d)
write(r4, &(0x7f0000000380)="457fc02558879f611ed44c3d24b48e10d357741e8c8c8304b043c26c844ca07a3dac98e054b517d342c7eb91bbe4d76d5781ddbc63ce16ec51e91b87af376f87ad5ae60815574cf23cd4c2929b0696361fb21161b4a77e38aa801054cf24dce0d8f17328d4a2122f49609974311f0a97f40048ef92a5bc78a88417986b71e6c6c45606adb948e24973ceda882ed10e7a67f1286d9d301fbadfcb6397f68609f1a471834f2ed19b34ba82df8bd9fd", 0x3899643da6c8b301)

[ 3151.938358][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3151.944183][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3151.950095][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3151.955878][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.178330][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 3152.184129][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.213429][   T26] audit: type=1800 audit(1572088793.399:321): pid=20456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17372 res=0
[ 3152.307234][T20451] device lo left promiscuous mode
11:19:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
r3 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00'})
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:53 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0xa0000, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000003c0)={'filter\x00', 0x0, 0x4, 0xffffffffffffffe8, [], 0x0, &(0x7f0000000200), &(0x7f0000000640)=""/61}, &(0x7f0000000440)=0x78)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x800, 0x250860412e6c2179)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
getpeername$inet6(r1, &(0x7f0000000700)={0xa, 0x0, 0x0, @dev}, &(0x7f00000006c0)=0x1c)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
mq_notify(r5, &(0x7f00000005c0)={0x0, 0x5, 0x2, @thr={&(0x7f0000000480)="0f0c000000000000b343f48a34460cabf9f8e0ce54924650244b29ee1ae86cf6a50000000000", &(0x7f00000004c0)="12c0ca0d8608b0358e2f9c9c857351bb9982052a16c0fdc11748447c9b3fb5d5a10b5288ca56f833d03aa3fb7748276fa3f488c6f15c1cca30a053bfec3fc5ac43682bd01e216ddb4bea6901f499468f70b8fad9d5520c249ef497d21c6c07e8d54b99733498b570324976160b77cdad2bc4f0b9494cf4b53773125dc1af1466a6b4adc56afa1efeec500fafb36de4abc6d48550f7cf12ca33a7997fcd63b8f7730f5ee918a50d18409a542250f71639c5518665f60ef9204d1531619a604682e7da6af01cc7c76d2fc817085b32be"}})
r6 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r6, 0x800443d3, &(0x7f0000000240)={{0xe0, 0x7, 0x1, 0x3f, 0x1, 0x80}, 0x0, 0x505a, 0xa397})
prctl$PR_SET_TSC(0x1a, 0x2)
read(r2, 0x0, 0x0)
accept$unix(r2, 0x0, &(0x7f0000000000))
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)

11:19:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:53 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:53 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
ioctl$NBD_SET_SIZE(r2, 0xab02, 0xcbbd)
r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0x526987c9)

11:19:53 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x600000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3152.437197][T20506] kvm [20499]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:53 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', 0x0, &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:53 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000180)='\xeaGF\xf3\xf4(\xe2\b\x94\xa2\x81\xd1\'D\xd3\xfd\xffn\x13\xd8[\xf3\xc0\x1bV\x1cD!\xce_`\xc6X4dhFP4)W\x9d', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x235)
shmget(0x2, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil)

11:19:53 executing program 0:
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000000240)="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", 0x1000)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7, 0x101}, {0x2, 0x7fff}]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
read$rfkill(r7, &(0x7f0000001280), 0x8)
r8 = fcntl$dupfd(r6, 0x0, r6)
pipe2(&(0x7f00000001c0)={<r9=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r9, 0x0, 0x0)
ioctl$TIOCEXCL(r9, 0x540c)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000001240)={'ip6gretap0\x00', 0x1})
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
splice(r3, &(0x7f0000000140), r5, &(0x7f0000000200), 0x7fff, 0xa)

11:19:53 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', 0x0, &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

11:19:53 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e\x00'/128, 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r4=>0x0)
write$cgroup_pid(r3, &(0x7f0000000100)=r4, 0xfffffffffffffe72)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000180)={@initdev, @loopback, <r6=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x880, 0x8, {0x0, 0x2710}, {0x0, 0x7530}, {0x2, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x1}, 0x5, 0x3, 0x0, 0x0, "c99de37958195bd9"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000400), 0x0, 0x6)

11:19:53 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', 0x0, &(0x7f00000001c0)='exfat\x00', 0x8001, &(0x7f0000000200)='.*\x00')

[ 3152.756813][T20536] kvm [20527]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3152.979213][   T26] audit: type=1800 audit(1572088794.169:322): pid=20512 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=17392 res=0
11:19:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
socket$packet(0x11, 0x20000000000003, 0x300)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:54 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8001, &(0x7f0000000200)='.*\x00')

11:19:54 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20000013)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000600)='D\x9aq\x9b\xff\xae?\xcdhreads\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000240)=""/181, &(0x7f00000003c0)=0xb5)
fcntl$notify(r3, 0x402, 0x10)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000180)={0x1805e, 0x2})
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r6, 0x0, 0x0)
r7 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000100), 0x12)

11:19:54 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x700000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:54 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r0)
syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$unix(0x1, 0x10004000000002, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d83", 0x3)
openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@local, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)="3ced01712ebbbbb101f33c4ca2403832096d9ae11ceb2e42972c9b06e8a891d536cc267d1fc23e84a952f0eb9a6f940f75c4c42924d310fcecb6ff62d3525f4df1e21b32dd753a953affdc61c026982d62f44cb2c62db352d941181b368a8819658531d1595c8cb3f71ddaea75e1d8000aabc16a090196514732ad05fef9d554da", 0x81}, {&(0x7f0000000940)}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0xee00, 0x0, 0xee01}})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000500)=0xff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KVM_NMI(r7, 0xae9a)

11:19:54 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8001, &(0x7f0000000200)='.*\x00')

11:19:54 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10a00, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)

[ 3153.544174][T20540] kvm [20527]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:54 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "e7d6b27d40330f8e4043889c916d4373540e5a65"}, 0x15, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x4, r1, r2, 0x0)
mount$9p_virtio(&(0x7f0000000280)='nodev\\\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x440, &(0x7f0000000440)=ANY=[@ANYBLOB=',dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',mmap,cache=loose,access=any,access=any,subj_role=,appraise,obj_type=fd/4\x00,\x00'])
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r4, 0x0, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d)
r7 = dup2(0xffffffffffffffff, r6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', r7}, 0x236)
write$cgroup_pid(r5, &(0x7f0000000100), 0x12)

11:19:54 executing program 4:
r0 = open(&(0x7f0000000500)='./bus\x00', 0x80000, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0)
close(r4)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0, r6}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r6, 0x1}}, 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0x526987c9)

11:19:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x7, 0x101, 0xb469}, 0x10)

11:19:54 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8001, &(0x7f0000000200)='.*\x00')

[ 3153.713929][T20584] 9pnet_virtio: no channels available for device nodev\
[ 3153.761774][T20588] kvm [20587]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3153.775712][T20591] 9pnet_virtio: no channels available for device nodev\
11:19:55 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
accept$netrom(r2, &(0x7f0000000180)={{0x3, @bcast}, [@bcast, @netrom, @rose, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000000)=0x48)
chdir(&(0x7f0000000200)='./file0\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)

11:19:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x401])
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:55 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x0, &(0x7f0000000200)='.*\x00')

11:19:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0xffffffffffffffff)
recvmsg$kcm(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d)
ioctl(r6, 0xc4c, &(0x7f0000000540)="b499785326be7b0ae22bf7e015779b11099283d4d0260c0a730b62bb7672d158e2001cc09d1f274c7648e576b681a1d9dc1bda78ef278009cc630d9f1be6807b77d1e12cded19127f746ba41eea90118d179c727ef1873583d5595c45c264c4aac571d8942a095d47fe1e565a3ef6f8f0d46d99c0111a02794211ad9a77e7074add729d2b0b6964fe6f045b0403673f0168ad6008e47c56a06844e10b11dd091e9c8e5744929ca240817159873daa9d58a74b906ae3e3f5cd31721e6ef1561c7ef156f44d25ebcc40aaa67b6")
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
ioctl$TCGETS(r7, 0x5401, &(0x7f00000006c0))
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r9 = socket$kcm(0x11, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000440)={&(0x7f0000000840)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000000)="9cabbf0451dc6e29412abf000800", 0xe}], 0x1}, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, &(0x7f0000000700)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a2", 0xb5, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
keyctl$chown(0x4, r11, r12, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4, &(0x7f0000000340)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}, {@nfs_export_on='nfs_export=on'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',keyring]trusted\'selfmime_typeppp1wlan1cgroup\\'}}, {@uid_eq={'uid', 0x3d, r8}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@subj_user={'subj_user', 0x3d, 'system%bdevppp1'}}, {@uid_gt={'uid>', r10}}, {@fowner_gt={'fowner>', r12}}]})
rename(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00')
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:55 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmsg$kcm(r0, 0x0, 0x0)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x6, 0x3, 0x250})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r3=>0x0, r0, 0x0, 0xf, &(0x7f0000000240)='cgroup.threads\x00', 0xffffffffffffffff}, 0x30)
sched_rr_get_interval(r3, &(0x7f00000002c0))
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r5, 0x0, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r7, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000180)='\'vmnet0!{$\x00', &(0x7f0000000200)='./file0\x00', r1)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)

11:19:55 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x800000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

11:19:55 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@bcast, @remote, @bcast, @default, @bcast, @default, @bcast, @rose]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000740)=""/102400, 0x19000}, {&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000280)=""/22, 0x16}], 0x6}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

[ 3154.265693][T20608] [EXFAT] Unrecognized mount option .* or missing value
[ 3154.295385][T20604] kvm [20603]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
11:19:55 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x0, &(0x7f0000000200)='.*\x00')

11:19:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7c0, 0x80)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1770)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
uselib(&(0x7f0000000000)='./file0\x00')
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x46, 0x5, [0x140, 0x80000000, 0x40000022, 0x400000], [0xc1]})

[ 3154.436039][T20625] [EXFAT] Unrecognized mount option .* or missing value
11:19:55 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x0, &(0x7f0000000200)='.*\x00')

11:19:55 executing program 4:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x2, @thr={&(0x7f0000000140)="f7c5569b1c858eb38781c5b77658059da9af6f96e3d82ae96adf8d26cea8ed33e1987e94854f047eaf66d6566eadd0aa239679d6f3d568b2f405a4b7f8bb7332d9bec738cd89f41f107a4b60f633a2a56ce429201da7c69e3716946e8b3a25b56b1667f601883b422586deb2179a8578f33d3763f8b124c09f5f54bf96bb2aae7949b340b056f17f6e2bd24d9a3e496205726f3610aa0761698ad5205ee9f8f8a1f55f04b00e84a8183c44d24555f4e1e797c222c7ac95965445e4a5c51c8d7fec517769c0089efb5c5ad0fbd05ef519985f1528a2e7c4ff53e8d64d9a2a6a5d328d17361c6c0ecd", &(0x7f0000000040)="24976694"}}, &(0x7f0000000240)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000280))
r1 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082)
r3 = memfd_create(&(0x7f0000000000)='}#*nodev\xee\xb8em2N,\x00', 0x0)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x1, 0xe7)
fcntl$getown(r5, 0x9)
write(r4, &(0x7f00000001c0), 0x526987c9)

11:19:55 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc9\x03\x8e\x80P\x8d\xa6O\xee\xef\x8c\xc9s\xf3\x01\x99J5A\xbf\x8c$0\x80,\"\x1d\xc8\x87u\x15\x9e\x1c\x88\xf2#q\x1ac\"\b\xee/M\x14\xad\xefH-#\xfe\xf7<qP\xcd-0T\x9d\x04),\xb5\xcd\x925\xa5\xb8\xe5\xbd\xf0\xa3\xe3*\xa1\x97\x87K\x98~\xed!%{\xec\x9c\xb7P4cx\xf5\xf4S\xbe\x83y\xa7\x8a$Z\xce\n\xf9\x92\x1e\x87\xd6\xf2\x1c\xd7\x95L\xe0\x80K\xcc\x0e', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
read(r2, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x0)
pipe2(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r3, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x4000, 0x0)
ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000640))
r6 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000100), 0x12)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000))

[ 3154.606008][T20636] [EXFAT] Unrecognized mount option .* or missing value
11:19:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={<r7=>0x0, 0x200, 0x5, [0x1, 0x0, 0x1, 0x1, 0x1ff]}, &(0x7f00000000c0)=0x12)
r8 = socket$netlink(0x10, 0x3, 0x10000000004)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x26fffffff}, 0xc)
write(r8, &(0x7f0000000100)="2700000014000707030e0000120f0a0010000100f5fe001259f338c57410e8a99f47ff00000007", 0xfdef)
recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x9d)
dup2(r11, r6)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000700000000000394e2c766ae0a51f295795849eed5d13f702e224aea98af2bd29768ec427f10f83e78d846156f82bb80f80eb4e4270d3a9b4efe3c4190c5f2ed05470711b9385665b0e015c54f1ce4588183fa0a"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x11}, 0x8}}, 0x4, 0x9}, 0x90)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

[ 3154.794577][T20650] kvm [20648]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 3154.978399][   T26] audit: type=1800 audit(1572088796.159:323): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name=68756765746C04 dev="sda1" ino=16718 res=0
11:19:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x819b1d9dd1a175a7, 0x0)
r2 = semget$private(0x0, 0x7, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0xffff}], 0x2)
semop(r2, &(0x7f0000000240)=[{0x1, 0xfffffffffffffff8}], 0x2)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x3])

11:19:56 executing program 1:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='exfat\x00', 0x8001, 0x0)

11:19:56 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x24901, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r4, 0x0, 0x0)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r5, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000000)={0x0, 0x4da54b9eb25bbc34, r5})
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x100, 0x0)
read(r7, 0x0, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xa7, @dev={0xfe, 0x80, [], 0x13}, 0x3ff}, 0x1c)
pipe2(&(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x0)
recvmsg$kcm(r8, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000200)=r8)
r9 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000100), 0x12)
ioctl$VIDIOC_G_INPUT(r6, 0x80045626, &(0x7f0000000240))

11:19:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d)
r4 = fcntl$dupfd(r3, 0xc0a, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x140, 0x0, 0x40000022], [0xc1]})

11:19:56 executing program 5:
r0 = socket(0x1, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x900000000000000})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

[ 3155.135243][T20665] [EXFAT] trying to mount...
[ 3155.172544][T20665] ------------[ cut here ]------------
[ 3155.195814][T20665] [EXFAT] No bh, device seems wrong or to be ejected.
[ 3155.223206][T20665] WARNING: CPU: 1 PID: 20665 at drivers/staging/exfat/exfat_blkdev.c:63 bdev_read+0x1ea/0x250
[ 3155.233460][T20665] Kernel panic - not syncing: panic_on_warn set ...
[ 3155.240050][T20665] CPU: 1 PID: 20665 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0
[ 3155.247932][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3155.257978][T20665] Call Trace:
[ 3155.261268][T20665]  dump_stack+0x1d8/0x2f8
[ 3155.265599][T20665]  panic+0x264/0x7a9
[ 3155.269493][T20665]  ? __warn+0x105/0x210
[ 3155.273645][T20665]  ? bdev_read+0x1ea/0x250
[ 3155.278062][T20665]  __warn+0x20e/0x210
[ 3155.282061][T20665]  ? bdev_read+0x1ea/0x250
[ 3155.286596][T20665]  report_bug+0x1b6/0x2f0
[ 3155.290943][T20665]  ? bdev_read+0x1ea/0x250
[ 3155.295360][T20665]  do_error_trap+0xd7/0x440
[ 3155.299866][T20665]  do_invalid_op+0x36/0x40
[ 3155.304277][T20665]  ? bdev_read+0x1ea/0x250
[ 3155.308688][T20665]  invalid_op+0x23/0x30
[ 3155.312840][T20665] RIP: 0010:bdev_read+0x1ea/0x250
[ 3155.317856][T20665] Code: 31 d4 fb b8 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 44 31 d4 fb 48 c7 c7 80 c9 51 88 31 c0 e8 86 ca a6 fb <0f> 0b eb d5 89 d9 80 e1 07 38 c1 0f 8c 7a fe ff ff 48 89 df e8 0d
[ 3155.337462][T20665] RSP: 0018:ffff8880a82f7780 EFLAGS: 00010246
[ 3155.343527][T20665] RAX: 94cc198e5ec3f700 RBX: 0000000000000000 RCX: 0000000000040000
[ 3155.351494][T20665] RDX: ffffc9000c86b000 RSI: 000000000001be8f RDI: 000000000001be90
[ 3155.359460][T20665] RBP: ffff8880a82f77c0 R08: ffffffff815c8d24 R09: ffffed1015d66120
[ 3155.367426][T20665] R10: ffffed1015d66120 R11: 0000000000000000 R12: ffff88802ff20094
[ 3155.375397][T20665] R13: ffff88802ff28174 R14: ffff8880a82f7950 R15: 1ffff1101505ef2a
[ 3155.383448][T20665]  ? vprintk_emit+0x2d4/0x3a0
[ 3155.388184][T20665]  sector_read+0x120/0x320
[ 3155.392606][T20665]  exfat_fill_super+0x11c3/0x27a0
[ 3155.397650][T20665]  ? __kasan_check_read+0x11/0x20
[ 3155.402667][T20665]  ? mark_lock+0x107/0x1650
[ 3155.407173][T20665]  ? __lock_acquire+0xc75/0x1be0
[ 3155.412114][T20665]  ? widen_string+0x40/0x390
[ 3155.416793][T20665]  ? string+0x2c7/0x2e0
[ 3155.420948][T20665]  ? bdev_name+0x2a6/0x3b0
[ 3155.425367][T20665]  ? pointer+0x1d3/0x9d0
[ 3155.429615][T20665]  ? vsnprintf+0x1b6e/0x1c00
[ 3155.434211][T20665]  ? snprintf+0x6f/0x90
[ 3155.438364][T20665]  ? __kasan_check_write+0x14/0x20
[ 3155.443533][T20665]  ? set_blocksize+0x15d/0x3a0
[ 3155.447143][T20666] kobject: 'kvm' (00000000564bce04): kobject_uevent_env
[ 3155.448310][T20665]  ? sb_set_blocksize+0xb7/0xf0
[ 3155.448335][T20665]  mount_bdev+0x27c/0x390
[ 3155.448346][T20665]  ? exfat_fs_mount+0x40/0x40
[ 3155.448358][T20665]  exfat_fs_mount+0x34/0x40
[ 3155.459863][T20666] kobject: 'kvm' (00000000564bce04): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[ 3155.460105][T20665]  legacy_get_tree+0xf9/0x1a0
[ 3155.487897][T20665]  ? tm_current+0x550/0x550
[ 3155.492397][T20665]  vfs_get_tree+0x8b/0x2a0
[ 3155.496814][T20665]  do_mount+0x16c0/0x2510
[ 3155.501145][T20665]  ? copy_mount_options+0xdc/0x3c0
[ 3155.506251][T20665]  ksys_mount+0xcc/0x100
[ 3155.510490][T20665]  __x64_sys_mount+0xbf/0xd0
[ 3155.515082][T20665]  do_syscall_64+0xf7/0x1c0
[ 3155.519575][T20665]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3155.525454][T20665] RIP: 0033:0x459f39
[ 3155.529335][T20665] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3155.548931][T20665] RSP: 002b:00007fa8c9ce3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 3155.557365][T20665] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f39
[ 3155.565337][T20665] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000020000000
[ 3155.573305][T20665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3155.576432][ T3900] kobject: 'loop0' (00000000d68187a4): kobject_uevent_env
[ 3155.581360][T20665] R10: 0000000000008001 R11: 0000000000000246 R12: 00007fa8c9ce46d4
[ 3155.581366][T20665] R13: 00000000004c6992 R14: 00000000004dbc90 R15: 00000000ffffffff
[ 3155.589860][T20665] Kernel Offset: disabled
[ 3155.610061][T20665] Rebooting in 86400 seconds..