: link becomes ready [ 217.914073][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.926096][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.929440][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.947543][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.956604][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.967155][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.981411][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.992839][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.005048][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.016467][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.026609][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.037420][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.049538][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.083392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.092021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.107684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.116966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.131992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.141062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.149878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.163029][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.171695][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.213216][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.223929][ T7052] device veth0_macvtap entered promiscuous mode [ 218.227366][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.245046][ T7144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 19:27:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000040)=0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 218.269936][ T7144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.287432][ T7144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.310095][ T7144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.353466][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.365271][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.379443][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.402829][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.428185][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.446292][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.466403][ T3101] Bluetooth: hci0: command 0x0419 tx timeout [ 218.473027][ T7210] device veth0_vlan entered promiscuous mode [ 218.502342][ T7052] device veth1_macvtap entered promiscuous mode 19:27:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000040)=0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 218.519099][ T7240] device veth0_vlan entered promiscuous mode [ 218.527493][ T8221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.538727][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.547581][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.555203][ T8221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.564104][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.587754][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.596467][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.606788][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.616923][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.625056][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.653062][ T7210] device veth1_vlan entered promiscuous mode [ 218.691417][ T2471] Bluetooth: hci1: command 0x0419 tx timeout [ 218.706380][ T7240] device veth1_vlan entered promiscuous mode [ 218.725131][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.751906][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.770681][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 19:27:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000040)=0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 218.796224][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.817283][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.833206][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.852413][ T2471] Bluetooth: hci2: command 0x0419 tx timeout [ 218.855770][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.888629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.896735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.920646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.931248][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.941164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 19:27:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000040)=0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 218.980690][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.002985][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.036067][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.065199][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.084104][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.106577][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.128139][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.136702][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.146910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.158372][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 219.186725][ T7210] device veth0_macvtap entered promiscuous mode 19:27:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000040)=0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb}, 0x1c) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x200101, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x982}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB="020029bd7000fedbdf2506000000", @ANYRES32=r7, @ANYBLOB="080001000400000008000500070000000800010003000000140004007665746831000000000000"], 0x48}}, 0x400082c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @broadcast}}, 0xfd65, 0xd3}, &(0x7f0000000100)=0x90) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000500)={0x990000, 0xffffffff, 0x8, r8, 0x0, &(0x7f0000000440)={0x990a6e, 0x0, [], @string=&(0x7f0000000400)=0x80}}) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x10) [ 219.234950][ T7052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.247987][ T17] Bluetooth: hci4: command 0x0419 tx timeout [ 219.270111][ T7052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.284865][ T7052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.301469][ T7052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.317689][ C1] hrtimer: interrupt took 65499 ns 19:27:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb}, 0x1c) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x200101, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x982}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB="020029bd7000fedbdf2506000000", @ANYRES32=r7, @ANYBLOB="080001000400000008000500070000000800010003000000140004007665746831000000000000"], 0x48}}, 0x400082c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @broadcast}}, 0xfd65, 0xd3}, &(0x7f0000000100)=0x90) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000500)={0x990000, 0xffffffff, 0x8, r8, 0x0, &(0x7f0000000440)={0x990a6e, 0x0, [], @string=&(0x7f0000000400)=0x80}}) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x10) [ 219.344608][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.362507][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 19:27:52 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RLERRORu(r3, 0x0, 0x0) tkill(r0, 0x1000000000016) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x9c2, 0x86e1}, &(0x7f0000000100)=0x90) [ 219.398762][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.436336][ T7240] device veth0_macvtap entered promiscuous mode [ 219.479589][ T7210] device veth1_macvtap entered promiscuous mode [ 219.488421][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.496302][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.521678][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.535779][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.558209][ T3931] Bluetooth: hci5: command 0x0419 tx timeout [ 219.564981][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.581652][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.593541][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.650081][ T7240] device veth1_macvtap entered promiscuous mode [ 219.716526][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.758509][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.765315][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.774076][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.774084][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.774096][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.774103][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.774114][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.774121][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.774132][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.774139][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.775468][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.798281][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.859544][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.879901][ T3931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 219.910696][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.966218][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.987616][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.001582][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.024393][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.035233][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.046273][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.056488][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.067012][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.080396][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.095016][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.104746][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.112994][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.122843][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.132191][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.142912][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.151549][ T3931] usb 1-1: Using ep0 maxpacket: 8 [ 220.157113][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.181489][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.194386][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.204879][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.215632][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.225987][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.236924][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.247880][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.258337][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.268827][ T3931] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 220.284285][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.298591][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.334904][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.349385][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.379500][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.394876][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.408074][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.424473][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.437098][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.457013][ T7210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.475481][ T7210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.498675][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.509550][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.526731][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.535968][ T3931] usb 1-1: string descriptor 0 read error: -22 [ 220.544070][ T3931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.556404][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.565324][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.573682][ T3931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.594662][ T7210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.603764][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.603798][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.630186][ T3931] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 220.631802][ T7210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.654010][ T7210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.663272][ T7210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.682974][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.705344][ T7240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.716979][ T7240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.730549][ T7240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.739715][ T7240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.903189][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.919528][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:27:53 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000011c0)}, 0x38c, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9}, r0, 0x0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x28000) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0x9, 0x8, 0x7fff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x23002242}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1d, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x4, 0x10}, [@NDA_PROBES={0x8, 0x4, 0x9}, @NDA_DST_MAC={0xa, 0x1, @random="08abf03d1d66"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004008}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x5, 0x94, 0x0, 0x1f, 0x0, 0x100, 0x40022, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x6c94, 0x40, 0x4, 0x0, 0x9, 0x7, 0x7}) r6 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000000)) socket(0x1, 0x5, 0x0) 19:27:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r9 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000040)=0x800) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 220.973535][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.040243][ T3101] usb 1-1: USB disconnect, device number 2 [ 221.083983][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.114337][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.640822][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.654073][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.667032][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.694810][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.725087][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 19:27:54 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) [ 221.754008][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.817046][ T2471] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 221.850302][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:27:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$kcm(0x29, 0x5, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 19:27:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r9 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000040)=0x800) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 221.946770][ T26] audit: type=1800 audit(1602185274.638:2): pid=8381 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15751 res=0 errno=0 19:27:54 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000011c0)}, 0x38c, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9}, r0, 0x0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x28000) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0x9, 0x8, 0x7fff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x23002242}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1d, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x4, 0x10}, [@NDA_PROBES={0x8, 0x4, 0x9}, @NDA_DST_MAC={0xa, 0x1, @random="08abf03d1d66"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004008}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x5, 0x94, 0x0, 0x1f, 0x0, 0x100, 0x40022, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x6c94, 0x40, 0x4, 0x0, 0x9, 0x7, 0x7}) r6 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000000)) socket(0x1, 0x5, 0x0) 19:27:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2e8}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x7, r2, 0x3, 0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x3) ptrace$setopts(0x4206, r2, 0xcc7, 0x0) r3 = accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x80800) r4 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) [ 222.097083][ T2471] usb 1-1: Using ep0 maxpacket: 8 [ 222.234119][ T2471] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 222.382390][ T8387] syz-executor.3 (8387) used greatest stack depth: 23552 bytes left 19:27:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$kcm(0x29, 0x5, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 19:27:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$kcm(0x29, 0x5, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 19:27:55 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x4000000}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x1014}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={0x0, 0xea, 0x20, 0x0, 0x7fffffff, 0x10001, 0x8, 0x8, 0x4, 0x8, 0xb0, 0xffffffff}) socket(0xa, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) [ 222.617274][ T2471] usb 1-1: string descriptor 0 read error: -71 [ 222.634566][ T2471] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.709303][ T2471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.806421][ T2471] usb 1-1: can't set config #1, error -71 [ 222.836464][ T2471] usb 1-1: USB disconnect, device number 3 19:27:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)={0x88, 0x20c, [], [@generic={0x0, 0x56, "9b58b70b8a0c3f93f7b3770b8dd0ca9df5703f744550ada9ef269853ac47cf0f75f82bcd4cbdd7be013afbbe4934e6324982d6bb9eda72efd4f1645ea915e03c792395ce45b7a2049295708d3598e3bee109962b90f1"}, @generic={0x4, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x3}]}, 0x1068) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 19:27:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r9 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000040)=0x800) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:55 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000011c0)}, 0x38c, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9}, r0, 0x0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x28000) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0x9, 0x8, 0x7fff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x23002242}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1d, 0x4, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x4, 0x10}, [@NDA_PROBES={0x8, 0x4, 0x9}, @NDA_DST_MAC={0xa, 0x1, @random="08abf03d1d66"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004008}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x5, 0x94, 0x0, 0x1f, 0x0, 0x100, 0x40022, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x6c94, 0x40, 0x4, 0x0, 0x9, 0x7, 0x7}) r6 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000000)) socket(0x1, 0x5, 0x0) 19:27:56 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000300), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x40, 0x5, 0x97, 0x5, 0x0, 0x8000, 0x1000, 0xf, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfb5, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x404, 0xc262, 0x5dc2, 0x1, 0x1, 0x6, 0xff}, r3, 0x0, r2, 0x2) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = pidfd_getfd(r4, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40447080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x10001}}, @NFQA_PAYLOAD={0x1a, 0xa, "d1ac97f17c51163bc9f514cd3c5b4a4ced8005f95004"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x38b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x4080) [ 223.685994][ T26] audit: type=1800 audit(1602185276.379:3): pid=8381 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15753 res=0 errno=0 19:27:56 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x4000000}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x1014}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={0x0, 0xea, 0x20, 0x0, 0x7fffffff, 0x10001, 0x8, 0x8, 0x4, 0x8, 0xb0, 0xffffffff}) socket(0xa, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) 19:27:56 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x800, 0x220580) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x8a, &(0x7f00000001c0)=0x9, 0x4) accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e, 0x80800) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x6bc6711ac5763745, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}}, 0x4040000) 19:27:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r10 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:56 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:27:56 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) 19:27:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/4096, &(0x7f0000000000)=0x1000) sendmmsg(r0, &(0x7f0000008e80)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x0) 19:27:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) socket(0x1e, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r8, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 224.225731][ T8467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:27:57 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x600000, 0xa2, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x2a, 0x10000, 0x2, @mcast2, @loopback, 0x30, 0x40, 0x0, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x8000000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x600, 0x0, 0x0, "0000000000000000000000e1ceeed2468761b20000080000000000373300"}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 19:27:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgsnd(0x0, 0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x2a, 0x101}, 0x0, 0x0, 0x10001, 0x101, 0x4, 0x8, 0x7, 0x6, 0x8000, 0x1d51, 0x0, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x62}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0xfc}, &(0x7f0000000200)=0x8) timer_settime(0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0], &(0x7f0000a8a000)=0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 224.461942][ T26] audit: type=1800 audit(1602185277.159:4): pid=8461 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15755 res=0 errno=0 19:27:57 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100), 0x10) listen(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELSETELEM={0x5efc, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x12e0, 0x3, 0x0, 0x1, [{0x12dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "012f638136fda9ead31e584d11cf6e836b270daac8ea7eaf746c4eee17ef47d775c2d3cf45014f210f0b0f7e2528268cd36e"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_DATA={0x1238, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000003}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "cae7943c86646673adf4b42d2b1c727e3dead2065b9984352698249c302717669c1fe082368b1883330493d724cdb59a97ce0efe52b113bf56f5f55bca5c0aa8df39c6e9213afb1e077f65c0734ff87c88a79da2413d78de17c40c6aeb20321c9b3716e19fa3a91377cc6e5e1cad1cf49d5123cdd2b0a0241f6482e6411b090b2f77b99d180e43ddcc00c4d09c49d910726324526cf9a49a6f1f36120685148fee17b798cc41858c4aa62b0d29b9d69592eec3682bf43284868e2ffa6b126fafcafd44e34063526962d651eea6d6f9b1fd11bee5b7109aae7424c83aca7d4c0837a8c19b673795713e8e4d5b0d2b1498d7ae8f82a31ede8e6167ff7746e5fa5f6f44b9780c0a0bb52c04573b19b0258704c6612f836b058e33feaeb2fc3242e0ae7cc253b4e968b0bf81590263d44b2518d355669e79b81558034740d3219428acb701ea99ab3dcf77d3da20517c9d3677a7857136b1e7feed7cc650b970c2048f75ad0f2d81e811d91c8c5cc5bd855c8e2d88ab5e150bb30b4b1c434d221cac1422cbdd88decb20323cb9372b8900b0508d61ee523c433a0cb17f36ce7c7b977069b0a4b6004533808b714a718ffa99b570cff9b34e746f2f69a018a2bc27f44ea14944aecee8221970a7827d4019bc810e0f288aaddb2bad9c00ab75d402496a4d32f6be148b7f6c032e74bbc12e50e63136cb19670afb6abd136a8e0f5a771a0eac386c773c36dc72366dfbb20c080a382f382881765aa343f39f128e73f95749c7b0509277150c5927d53fcfa14da516b990f49212ca9681127e0bd64fcca4cb3c9493d5fb2e7affbe91758ea8c74df3f4ed335a66e64b645155f20625681e0be30cd69c2494f3a1aaf26d2ceeffee617b08a9b2b70fa9fdb8bc83dc23227b6eb0bf3777993eb89e22401102bdb47b23201e8f9c9e2116279783943632e0ea177783284e5a4ab97172f386c7f9033f0e0bf1e22ede5cf88cf65d6aa3ab95d0cc516e9d5c62eb3b9dc7bcc6bfb0c546716f1bf54ef207869c57e99e874c49333bab2737cd8aa82b716d9cf44fe574ad8fa09ef063affa9ea21635fad0511c689ec9030d9ef454a195ca3d2464a4ed65dd76d72d9ffbc3c50b6da2806a61d7054f1c709b7aebd830f4329a750c40700a152e7fc1ea41ec39d593f1528bd8d9f566b220c78a035059e3dc1fa9206e277b334ddfb371645c96797605766fee170c076c01f83f1093eba39f6a06188d2a2f7f3a6778db2b5893a254a724af0c9d7cb1b52ff11162769102ff1b91ce023bf5d0d54e39f08cf141ffdff661a62b6a6b7c0dbacacd6b16f4f048e900326da9876f89ad340f4d48c77fc22b6348cb8878ec1d3973ca3fb77984e9bb1af0ff3ac35977b084a8106d3657e115dfe36bc5e7124ff8f9c06f254440d382739f389dd69529fe647a079759aaa83b1970e655de5d33569e35972f8610ed87c5f469078d37987c52810e23bd41ae6df94b59f28faf2224a515c114336d8eebe39a26e3e51478a61d77a59875319fa76e7855aabe3d0ced934c6aadf0684a4fb380dcbe0a2c32cc88d2856d0e6c4e6b2e04988835276cba57f0a840cfcde771b78278f9503b4094826e99b3d6de42b2f97911e573f6308af9eff137b1ba779476c5fcb1b43541aac103dcf9f7a3810bf1e19ba60632656824341e07f1ff9155840a6d785d606a411531b4b67a45463bf0269a8bb56b7c604959a441ea72712f575248baeaf4f4c7eb2adae9b432416c983d137ba87319af281de6c80c5897f2179c97e7e80730de9497e2854cdbc468b8a57f22b54d18524dbfc5c108cb9d2e0213742563ea4e15857d928fbc7c6d582b708a3ad3dea635d9b46c49c185fe752ca9109f64feca1773981d48b08a562c722fe35a1e903caf73a81fd009e2ce94f753ed023a5edcfc5142470950069e4420049d455dd42f3f6a7d262703d9a972cfd3f2fe66abfe9a5952b36d4b3c6f68dc19597d486cabdc0e6e47caa70978b8be39ea1cfaa276f1753bdb2b0d45abca204e9ef21866560934c55435dcd4c32a2b600816da541219da8891b481670407c57322797fc961628025c49f5a19b04c537e50c90befd2f43b74b237e33e1996de64efc46c9f24e6d84ea16becb44dd23b9a78094b7dc2529fb40f27c8ec4ff99843060363f6c1fbacffaed67695c5c49a254e07923efb4d629a078d41caf70177ce9bed128123c2e0c4340b14a53888492baa4d944b8f2adeea22a3a1a29add58986ef8b2b3f7c4d8e2bd6188840dc9ccaaccb9ef478fa0297b3f797bb11ee805dda9cb606db57b32e872cd193d8e63398a0c2a7cf55081c079a1e369b246a3be28c581ad89d0a3af1a67e6dada27520202fc3e92c012c953b306bcfc47b1e73114e3a8590790093ddfe9cb9457955e4afc0da91e4a32dfdbba3263a22a3ff22fc3e93d3d470e690982c8608169d9bc893d6c72b5bf5de4d11ad89b7d9dcca9c66563c4c03c7acce32cac64f15bd2905bdb16a4faad4ae6eab547990e6dc03fb3d6407f3bb1e6e687bdbc00275941d30406bb6463ce37d62c60b6281cbdd0b5eb35b103720e9f44a706dbf1ffb3f94e53bf8986e107480fedbbaee93d5512d0c55ca653c1adfab748c4b22ffc3894b27af07f57ffe3928b5cba680a3d4cecc56f4bcc8207089adc5fef3c484519e021fb79030db6ae833af8c4782f4a8795b9d4c3c4df09232b2a362dc262696727734ccfc82a8077a1433ccd63177131079a82e55c1bcfce6f86717384109fcadca83a1e171d073604e14c84e839d2329cb563e8426b7d4e899d5d01e1363c4c9d0fc521c150e93ce167bbbdef149cf0d1b5d5e3bab5de609b6c5319e580a4f6558ae2b0825e66362def08bf58baaa9d26f2dfface2e0a51b67fab3feb246dd198eba0bbed1bd34dcac06f18713e682c600747267f3b2dc530b8fcf0ff1142cd0a24343cffbdf34402dab9593ebf301949d8b24383f52605ed215d8e269a9e8b284e6b3e66f2d183ff9a6c57ec7a1b4b322df580f3e34dc1de3f8b0a91df9f031187ebbd525fc10356fc77677c7e123c1a57f09766158eda7164ff2cd08dd4820fdee57f11592b984d091459d063040445800cbbc77ade773c7926f92feb9c7efbd3444f9f4c635f6e9902b0edffc2bdb2e285e4ea778bbcb136cabe5202776096d53f6f12be61ced04a16fee54be883ef5b388ba26ed9b9e0918222a4caeec443d3b8d2224d75f02aef2059d6e1c855dd869fc658dc65f7406acff18bec113ffc71efeda4ec783d319139dea28d4fadc4c7ae89f92a62e2b6d4423778f3a742e8ea44b39834fb8baa02d3d48b7dae0e76d08a9700bff96d11e60765be301b03a9a5b4c8e77ea370ebd8d6a42735075ecbdc24acbea2a3b76a8757285814d35c1f3633b1e557b185980b9f4232ae9c70b9fcbc9dc1c46d6048fd0353587b310c8b6d16791d481dd7e95e1fad160ee2e753d53b8cd2d206265095cec788cd9c98b6c0718c12c75e710398348e036c3789446a1e11d1a755fd3cce883ff83218a2dead5b89f1a0260ff6a9fa43ed9c8a0d1a6b98044f1be18cf80777d9604eb20ff63c2b00b523e67bfc1c5ee53a15fbf55ec5b815eef21be5779b62a46a75aba4fd18a5b6e4601269d88cefb72a5d1eadf55f593158213b02db8e931b14dedaecbd89e870dae267434a7291324c15e378f7becdff68769596f7fd1cb8542f73049959800cf567f6275d19a55f1f68cd41f689a082f7f2d05aef9717c2c99507a0496b9812c791ef6e77d99fc966c0403464665cb3ec121ce23d94fb9f53747ba695ed38bb5bb5096f3b0157411389957ae53eb19a6f434d0af847ec4647b4990b35bf13a17ea45606c0bcedba41a318cfc6ac41646f60893cb08ea2c56da36f48103028707092aaabfab33505bd0b6f33face44c29e807b9774f5d6cbd0c21f99ec00eaa95d7bb42f960d60483c6452f89003f7f27b939a22f423158dd1d694f7c9a315586151518a7f794c50a42c325e8683fc8f2e701cc3a0a34b41b9a2beb58235cf6bf0b9ef0c4cf28d7866fc61c948f5148bdfb39c47d4cc9535fc3ada274bb091f04cde67bf861857f29a1c85518b3820d9e85b5e37912c0a314b31a7cab2e676446f703001eb2975b94f1843cb67f8f4913d2a73a642ba1017bc0e02291ea81af5e7e79ec7e41069871d0283f2771f85397b55221b55426715712e8d3e209907991913b439e2cfec147b4f1264e75a6bd144225bc08d18e545ce15003806fa5d26bc20e5214750d1d4730a132945cdcee935ddf2f2a9fd078e80ee18fba11148620abb5764f694a3ecd9b3a9726f278cbd7b64a104c565d4e815d9fd09b8018f0ab9d9059dbb28b119fa085fd961e7b4e6ffb74f8e5807b84483bdcf110be20cee30547f136c9ae638de43afd9201b3a1f87d246e813c4cbedc7190c580673f6c9aec62f986433b2cf4bf83039ed04c57fe268c3de5ae9bcc16746c1836930ef0439fac537c481e3358f6adf9d290c17ce65aa720b907f458a972a0500545069ce74a46dbd19d4ec5d2da086fae7eca8826b7d7e96c400c9bdb791061c4cf72c7ba1727c8034fba2877d3f7083c8c01cfe8be96da3d1fa91b5aa82ef5ccf806c33633490d3992ce14c060f49649f62ad4a38d90223b643ef2549efb1a9167e89299e3f4d2ef3003e1a171669fd3952abb8a558c64face3daeba072bedf3183c90b61d16a62c0b220168b2ea8c4b6f966fe6b4216b52c5dee1fbc6a51700989582579a96249418d0c7550f3f0c9df50a4aa6eabecf4084266b6fbfddd9bd90bc4979a3b02dcf5730c08521a129d5cfd65715d49e823bc79c084a6e0effadc025d27d034f24257a63960ee9aa4480666c01d7555be65db0fc39dd74d2061d2f978088754b6bffe1df8ab86f9f44df568dc488210ec428aae0ae99807c7d2aa79dcf560d23c04ae1bf363da3ce292556cd014d6ffa90eac3f2ceeb8250923693e048b6ebcea59cd46b3e1cded4d5754c411a95dd7dad38daa449d5a0938680db9589532d7a0e7341fca0d27cde128c89cb7047ec15aa2705b16af48a555899740ebc4cb5991a91f98f7553ab3d7a6399d550d2dbd92f87aa6f8ef2b8c66aebe141f221f51645d05fe32622ad093973dd7738e026c9c0b46481c8d6468ee91da27b2ae66c510e288ac2f3f69a46f4cc365c840fc3b40c742ca5b22e15024ca9eeb081f4b62e7a44c6d93ba8d06b950e191e95cde20c24a4a10ebbc1ebdabaf2a1254f071f5692a00c148a1e18726417d0c18ffdbcd3dc983c90abfc59352fac1eb328b0eb2a950763d7d55e1c840b4d76ff8bf5d24b197ed6bdd5aa99bbf4cc244710a0f9c376d8f9075bb5997c2332f810c6a36e0c87ad812d04b0bd2eea2a7be93864ecb94f4a77907713de0042054b53bc312b06e65e8fedd819e2eea2d1ff5175877fb418f9e13e294eeb9291d4ab33f77ae38fd63a3b04da2d82a0fa726a6d0b841be912b245bf2fffe75f005116c5e58fb22751aa1f5237c51db79aa15c70111cd4f9a900c846334a4cd6628e486e057072d15bcc56297d0b22884a1d08d702a12669e007a62e0e7508a14dac405ea7361611813013b8d5025de76c3da3ab66206416904d857863caf0e878bffcfbdc29c5de9726d6678439fbf22004c42a4b33bddaa333d90d25ddad730aef8265d90d4f7d565ca36c12336d1c21db73496c9f34f67093e27cccbf54de3c5b28361e660cd01127d532e4c097af9952ca78a94bfeda0c698d0be5744ff20e40b840616963a"}, @NFTA_DATA_VALUE={0xa3, 0x1, "7905b3ae9931aa9c964fb51c80db62b8be81c03f99f00aee582009eecfca029ab9f7dc925b4e3ead339892caa957911b902682646b38502d8f1c911ed669f94c0837defebf690190309c0aa93a6b034a4933034246cdcc80d328f20beb2234abd9f957fd68cf4babb199d63454bdb8d28389cebe3e259b9ee8a55e18a773510c74b738d3efe4280ac5c6bf1d11349db720b876b49a4dc8b8cea24daf4df4e5"}, @NFTA_DATA_VALUE={0xb7, 0x1, "b17d2488ac40711e9da6e1e80f0ce6651583a0ef7ba5ecfd99b2b4adfea2cf990046a9f2bb9b22d35df14e2aef21a4aea09175e9b69ab1192ae4ea89a0fd0ed80673d3dbc9f802d4c5f40fd430bb76a145a76562fcb72490a29083ea97f9e1d03d0f15c8408a845c20074468baba8a1e92f007c147e6a3875e360c537dcd82830bfb198a908e997e44865c327c2a0b1468b9748efb136add7aa29dee7ec82922ffbe9ef924113998dddb362d0c5832b3fb2d14"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x52, 0x1, "3d242d3ae1601335b0ee939a628b7b9c5f960868335934b02989b80ac684e9930985519d6805d4b56d580a6cb0dc74d63f96078d7c204ede80023ec2d967d58474a80b0bcf9d5d60ad162da0b2fc"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x48, 0x6, 0x1, 0x0, "3e152bd771bfb55be457285025ca53292b5937438005e5f15be78ca20becad918fd62c1157b39ffc78612ec1ab3b9bd2e79c0e63d3ae291655d80744b3ebfb7d543be0bb"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4708, 0x3, 0x0, 0x1, [{0x1058, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x247c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "328e0cd4346cdd77ddc97bb15ea9d7656877bef5b0aa15297179b21fb959d09b64ab82ec1e228ec228ccd46331f9c682632d3e6cb57a8a49f83695746122d82de77c89e3f2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "d22580f58e2a5db28f3f7a0b4957a3f9bf1fd7c201cd6f904cd1af79822c07204d37dc1b47f7188753ba4ff5ce11a35c74b818cfac8e22f741108612249caf18f743137e8c6300f8cf20f7aa82a92577515c7b664271e806e25376892cdbb872d6b929f2870bdd69fe58617331756ce79f04102db8558851cd5c1cda5bb22d8409ca0e69927db0e82649156f2e00831a28f10471a3c654153b475450406700299aba4c2b35a08466d64150654f6ceb630108cf07215efb29e9113dd2aadec796a1128d13924a36de9aa6bd5c6b05e2fc3eb14949ac4d00b214e3a223acaa1f5edb370b5b99dc86f35fa97bc63426fec2d2f8b0e79bf1e9045ba6790fea591f9b513a5bbb012ddebd1536e9957cca8d4f5af1470686ccb5f5561502b57658ed5cc43ef91f0ff0b043c2c170ea1eca425d9a4f4b4a6656c7ed3d743d172a9c3b203cd6df83be96c413d9057dc5925f0fc4bb24900f60cb4d75f7f30465e3d6607c970ebd0ec5cf7e0467a8f3c5fb3e7e35906931532115cd62f7a36bd5678545141847c154c616e2612deb9ca46a21688cca138f0e9f57e3e8785e371fc6a89d1b5193a6119c1f0b30a90f46066fb069065ab8214c476568e355822bf81df49bf632b5296bbad9cbe4f57fdb51d06a2f04b34ee883ad33676f54e783917e9688d28d09bc40c9180f6c2370208b47ce158b86bdf43288f0f919942386819c3357f006f5005746357408f294d0a76e9008e8c19b87a0ee9039b3f28214617345463fae03c8ad6efd8baba5012a2b27f00a0c161e0f9583bb739d61e5503213eb9fa68e9415cead939534a2b8ff870f6031b0815eae0c6b3a20a806ea7f53a496dce2ea3c1a1f3abd7ddcb571fe4dbc87cf1f9c6fd1bfdc3460cbd5172176f2035fcb6c6c84794b399d211d46983ae60ae2bacc30166ee3e80e2372b3fdc0411a395fd0dd911c729f4fb2086f09bac9ec1fef78ccfae8838426ed841f9872e227223fc083aaa85824ce663bb6f55c6d89db3bfb42e3e2c1432b994112593703feee39cfc1b77a005e1b8db96957b19201b1b1c4927b60071d2d4bb378c161f247f8af46d3e82ad30c57d05ae489d5ee879759f8d6fd21b6415e5d1a30667a853527aafb4eaf19eb256fd359afde7f66554184f0f84d74fa6fb09f8f4824d6d6464ee6442179a97109aed246dcab845811ad719e3f7bb0bf9698f0da1cc7e9e02ffc82eadd1ab03a49f836deef80fc1e32e636d43142a0ecf0b3d4f2b72775a6aae3935e958ee1af8d78238d450140413460f91ab7b6eacf1326db955b5ec2d6222a1e90acb4d405a7fce728ef79902050def58461edf2e8bf1447a50dd4ec902968b7fe36dbc0b801888d9678e594b1605db2a8f2d6ccbd2587c609a68c5de1b39ef482bc97aaf8a3a55884ddb6c4586b8bb94c5fd057d1e34693ebf0891d59301d02456aa31780124ed75afa7f31115c4e5267671f308f3befac5286dda6ca897dca0f2241b7fa822653ddf58136e4b53adaf8e3d25d4c5294c3bbdd415d16ef28cf8ead39178c09dcd410afd36ba5ecd2d5a4395401996b2342f6cc5e47b8b001b3679e96c2e5349f8a84aac3367ae818bd1e717e084073fdeab8f251f4426571953a9cdeb19d779b58d51ce34e65b1b7fab26d2a129c222ad908dd77142be0daee8e3085647e6547c99394e26e2308d2ac7d3fb81f0e264f02d2a8431d27fd33c9329e8028b0669cc9b8a45b91735f480526cff5b7f518cd5ea4b8eed797102cc91f2d6b22055b46a40da1e07367c46e6b24982b7b9306c7170b829ef7df92ca5b96de7b43f621964f03f5ab5209792096cf3f53279ba600d3f7f36d6159349c0ed5120f78555ea22b6348e24b30a5c4780df30402fb261b6865362d8534d3ee099cb05ed3bb68e04d2d128fd35fc7a0ec610a0e4035ba54904cd210c6b39d9b18a88d63270ef13b7e277fa24dce5009fa8965c04d044492b9bbea25496ba293140cce8b692daf4757999772b74a84ea628d8711d8204d172aa1faf2ba95b497fc1c2b169c1c4af571b6b362d025d852792e0ae045fb165521e65b7ec29d1f8bbc8998eff269075d2ef253a4624f0e3307fa743e6d18633a8e81e019013c57f3a79ab4b1a5446d3b5aa4a6f82f0bf70a4781d6183b352c36dcff6b63b79592e2fe17d86c31228feef0068412bf48be884fbc84d164020b683c5cd8e23b7c72311eccaa000b282434964bdc871ec2b6e74500acdecd9edc25abd2efa5c4fecf9a4635a49dfda6a07e9f451cfb85f0bf8c3a686c082fb701fccc3eb630e9047dcae55705218e528492ae8acb03222202ef037fc8bdf363fe9d8e0404266cd64c1a191ccb1dbbcf2b986faf3c200afea57d8cf8df2bd8bcc2730334daf588a772537810c69f9ee2fd2127da756698a667893c35702db0073f8deb3e14fb1a81278cba18c5ccc5799aa1d9ccaa91f9abb6dcaa2e07a0306666f115214347e7c7c0a36ea4d926dbe4b4bb10aa642e7fb2f352a514c5c64dc86f4644381bbb2310e6e69877073b96a07cf6c971e1da87c0683f603ed0f77b577292c0984aa23abc7b87baed3dac81ca9fd521e0b769559bc57757eec162f524f682d94e39b31f2fee7f07726bcee328e580324db2630d886c3abedf612030046eb78a22e413da18bb1b2319e3affe514d5000c1e909396224139925aa2cbd35525789a1f72c5d56be10c4158f401251052900d7e75057129bc5270c21ce18e1ea93fda6ddc255deecae193d56b2e6419c0fa016c3ae5450475fb5821e07d459378d6df9eb3b1a35417f32c998983ca142beb56ae061ca6a8b21161fd812d0090b545cc4f2f3fc9c3ecae978ba71cedfaebd8aad93fb916bb12231f5b5b24729fbdf5d0a9d1fc3334aef6ed12b61e298bde0fdf89aece1fc625f15a2574c36acf59ddc24f0a478a64b25c8f82dc26183b4a184133dacf248f083822f2baac5e4052d5701fab8a6ad8e6c120c9f67a7626050277f4669bf16393600dd8ba703105ec1809eb06af8a06b6b51974c9242c0f25ebe0f34a45b98a00ad7a7ea48b20ab98aadd8a32485ac9442df4425b555e16ae9a2652915ee133e041171f35ddeef76b1fbf07cac4e26ace2faccaa1e74b85f8ad91aa162b2156b27168645856ae83d684d5746adb2d11a2cb6bba4ad5a58ebe61739fd0d5d1c2545fffb878bfb3a3fd1c2ba914d381684a43ee23c93e2fba17b0499e5fcf2a219cbc2c8a3932d9053b2f265a21ca204be2a33f7945495444b23bad27136c52bbd8624dffedc682226a91f11f3b56d08891c77da6e1dc6d04ecf6a87b5ea4f2e83f553d0995d29c774cac2c85b2474b2eb5e275b55078f7aa015d8bc30796b99ff3480d7d3ed2f16a9a488433a6a79a6fdd1ad07182147800728336178382a60dfcca9218fc8e9b552b2f608b16f60d7205bf815546b1251e0db6a6442f9bf4a23eb31a1a61ada4b644338dc194844dd9345767d3fd786c470a9feae538a35bb606bc25becda23e26feaacbd2d7c7a6e308e41fa3644d7b8383d2937608010d7e5b45261e861e3adaf74870e655a641c2de95a8f3b9add016440a8aa0ae860d4dbabb05fb05575cc8f9f21e15b3adadf513208187b89d4caa0f4c8b513f76dea6474ad51ff69adccd2b91da50d8b6b06aaf050bd773a7eabe0db130073be1ff829a03c50ec3f27d225ab935c7bb2868ef96c6d0e42673dd784ff7856c4ed9025d51c54dd0e9d318b5afd2076dbf3adb5896e05ac38b686ecf7a69c232f1b67db06127405544ece3d1ee44c2306f0de7685a8c5d7e4f04b9e56d7c634b5a3b7505aa28a24bf1a50177f37dc641de8a74eb635f8d0084d7c3a9c8bc27e45d95f7e139322012443e8e585f047af194c2ba027b2020eee2f9b15402df9e16189151b7908362b43e84f9142e516cd5be62da41ac4f877173e434d9652dab124546da2203e5b4eec1a8a53b260302556590e0cb7d6785a7e250dd55768bac3440e4f460768b94e9ee5711132ed4b0f62c6c987171b2f51ff59c198b2e9f21ab36ba7904baaebd8487375bd7ca395a54dacd5a49d678279e3ce3bc94d294478596d549f59bb3411a16ff8908a77641b7266f24e500814e931a3e17cae14d091ada01e6a3bae4d0488a1d8ac9616b890d89d24f0f87eece2221b1f1c0c886b020d551f616bd9795e340eb7bf68199f21592956a3ae82fee02c4f94f02d58f40cde8882a683370dcbbd376425de25cefde9be7f5c4fc09b3b236cc4ef0db852c0e744ad0a6dd1d491d6d7e4eec83736ab50c2613676711d8b97553a2f6cac4a58c61b30518f4b659e91f18aa790ce2ef4f9693200e797bc9b2573defafcb00f84af8b146f7779326435a1077dbf0426e83fbf7c80d44863ef92769daa4f5c24ac90729dae3b697d18b3e206710d3af857751888d47aa63926722675dafd254ea08dad80b0504dc732ce599bca696e0ba0b3344ca6d262d4af9a753a9885522c7812df5156c3fd5a1452df6fb436ccb9dd1c18a7c95a8c6bc43f064db988a9162c4ef7964d9035ced92249ed45c79fe5e6b593e318ced9e7bbc672e63cbfe06f630ee94f2cc0035f0c7d5ddaeeee4dcfcf008b3d0b1588e4458143245ccc7b48fe19509a856fc3c5f08af2a9e2d35adb58b0c5ba32b232a8b98121763bc58e6ceb4f0813bbd80195dda5e76dba67491167406d6ae786871b6dec0e2b2633534d73ce58e745940a99e0de0e5864eb446028d0db2c3c217a872093d0b648abb9e5887155daf5880b73a6d8e107df90652a8092bd17b87334e09456f6309dc3e8eb1dace3baa913d5f42641fc7a273a2e4aa5f99cba3887c8a84557dc2ef33323314fae027a540e8bb073950c876c86d0628f3edc676872f34f596d1377219e28e66d49c4a9f3744564b438b5c4c95d1e4f64d8239c33b513aeb2a85e123b6e0c183e530a323dd403ea882bbf0270b324fbe2ca00389f35d5ec91af5fda8902bedf7c6f1ff679b9628d6de75af0ba73840c209b3d4193035ca6e80baa0fb66b3e5de9aed027250c2c91dcc739e1de5565b0c515a6abc23ed6e2c12c39d89b125b56f0efc214ed1f9453d9a551330a4b015137324db537063046bd4ca2fd661c3e04476d7de59a0df60b5ef878bf7f80e265364ad28b5167a5960afb1211738cdabef09cc30ea603d8d37185e09ec06bf1dde487dee4a240cf701a9920f776d84ab2fa300e0b32b1b92cdde65f5aedf7590b710e2b834e9c717a43e932b7d6c9ab7df302dc8aa3d1ef0b023c7485855b96805c85d1982399ad6cd6daad8fc1eeabbedc1159d4ed807c457d0b44297baa7aaccb72a0b005a0a9b385fe655787c2e09d0ec11b57fb9c8fe93e701e131055bc9cfc9516e951052527cd73341378648ab05b18328bd2c8d235c932f9efd7565024127c92e8f5fff4e7574fad75a1bfc4c8bfaf64d26cc59ee2601f0728c6e8e22a567b2dce2a7503dad41dc9adff8694006a88ccd324fbcc21d1aff685d0c1f896b50d27b098ccb5af8d7f6eb4840eedcdb43e5e8e6453fc823bf269cd78bc9e42fe5e06aa952e1f46bf7fb006d114b965ab3c6f2478addaaf4f28f284e2bb387283d55d4a2dac39d9c0ae9da706a6dde27dc7e9210b5a0f175324f012483cf32b10b11a95fdd7b28361f96c11486d47b42c3f407babf98ed4aed354d5caef3950b778cc915cb529c29c5a39375c9fdbc95bceedf4be90511d489285d2dd582570dbea2984caeeebe95652e840b2383c29e6c03e0a5d9669d95f8238fe7097b3ee897eb56540e57684"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x80, 0x1, "1216521d29c5bba693bfe7030841b12f92bff9902a85c85f9a7672a6888c0370c12e0e84208492b49ca8ca5fd780a2b52c7bbeacf00f1ee24585344dbdc45d9277c7614c09e9beb2e35bea20cc3a35beaf75ca04e0d3128e31c173f3ca2982f9eb10b3bb52d365f197f8f2a62ba9f397fcf22658a120bf80e001baf7"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "240842972d7d3a4a2b3b0b23e3bb7a6aa96dcecacbad14a23381c584fe4315e206a8fcb4272fb6aa4dd886513c912f0b94067b495c9b88d61873b875cd56b9faee26cad76e9c48b998afb85862a30b0340b40c11f9ed1c559000e253a2e6bd2bf48f2250c1dfd890390219ccb47066ac6f7a786edae00962ca68af17e29f972af0a0b0d30ae6e722c4f4b160c3abadb3d0e4f54286e8aa34edcdce339c27a9b66be7266a95024034315fd7"}, @NFTA_SET_ELEM_DATA={0x2a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "f71a9ab7748d07b253c40dd3461740ecf22a15b6c0528bdeb68e84332c0c7c33ae203d65f943cd7f55f0b81c6aa4b9496942379ff668aa309c90962abad16053ad86e6872509df10b1aa7cefa2b546a3bbce0c982714c1a75d96a0465eb9f78d92988fb4e6c98d4e72a5083d5ce793dc1fdce3fde5d8ef"}, @NFTA_DATA_VALUE={0xb6, 0x1, "1308e1dbe9266d0d09cc74af570f7fc74ec95aad60baa2ec08ef0e8b45c184f401004a4c32067a3eb49233e1d18b81814289f185422311098433bbbd5a158613531cf4b31e9c99bd6c823374829e2d94922c5bc87970cfad4e0ea72b23362ebecb334266c8c874463d494a3697979baf55d647c717b52199df7c05182a6c3dc585243ade37d49c6f7943c3a39744adf73f059f6706397dfcfac2546f18219f4a0d798df5dbe9c8991c3dababf1c343e2a1d7"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x12, 0x1, "87bb59c4ef5b2db493737cbb894e"}, @NFTA_DATA_VALUE={0xa2, 0x1, "7fc0595a270f39f1fbd2ef7fc6db4d80ded48ff08c5aefd28dcbb8c53a1628c302f089630a077a73592b9fba50558a6f4b5ce5d4091eedf72a5f8a9bcc79a84c1af78ecefbbbc0c1dd955fc95e553b206516e1d0732c9aa0c0251a31ad92bdb7e3ed3aa00aaad1c71bc31892cfa5a9363a0d23702b92dcf5552beacec2873b6029e02daf3a7a164a4040b1c5de3d21bbc8ab22896cc2693eace0eb4c4daf"}]}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}, {0x1230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "5d57b28f635f1c305b4507558f6222e091"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x7b, 0x1, "642c982147745feae44ac083f539883103e06e55c2bb8004cd41d86ab9e0078faa1524f5a8e5fdaca15e0c40b62fdbca193465d6cf5002b9f9ac282ad873a0d89e772213f928eb78e4fb943eea7e34bf28df4bd33d4a6223b555b62865f223cb48a99414a66672f1d9f5df4d0827b1ba51978e05e82aa3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "56f4814b63b74ac8f0aa973f41df42"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "06672ef6e0f56012e966cbd46fab73a300ef16a6577894c41bb84c7a074e29e6fa26edcfcd15829f937061a880d2fa1f8f3b0485e7aaa79d6a12cf576e1da782e3e4a7b886bb82327190d6f855a1ce23b35dc69710ae5f52ffc3ebd1dcb38c3797"}, @NFTA_DATA_VALUE={0x71, 0x1, "b0dd4aeb3052c0162bfd99a9fcc93a55b8f7bf63e99112e124da9d118bcdcc1618e14b0a210d1fcd9fd94205183e7f3b19df811d7d551b241a799223a4dc0077568629de2c7e8491c7ea21f824a867ec971337df06357ae1746eb00ab9a9a5e204f0fa8f0faae48bb573da4568"}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "38ef01982cd0dd4974ceba997da8e877f84ec7f7c2ed328769fd7fa7838337163b064697f67c5f753c91a7c618c9b80db5acc2eb0796e9337a"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x500, 0x3, 0x0, 0x1, [{0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xa3, 0x6, 0x1, 0x0, "099222add30679d19d7ba9558232f356d246dfd20ff1e3c3e359fd5ffa36ffb33b5b752d1cf99019b3fe5103a7bffbacb48442fc554093c7200c932cc09bb8ac303db34117ed77db4ebdab026c4efdfc6f188c990d1ad43b24ee8d236195c309e68057a5d3bf88ad286a401ac25f8fcf463b0db80cb504a945b2e967973b23b21e5490176f86d8b7a5ad9df46e979c839da53920ef6f2e4f388a305ff3bd3d"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "8a05c5bd977cf66b53cf3f767de1796adc131dae7515d94b6b12e1a1ff814bc7dc120c64670e65b71d0d4a04706cf68adcb12e28745a6a7404b438dbb0660318415a40cc83d8399807aebc9bef80eabe22a3551a7dbf32b6d31664792ba1ebbdfabbb0baf639681838cef3dcb0bdb029d44b3259"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "b845d25768be916560b5a2d76d89b58e51b4ecea02f7e557695bdde7004037eced730d87d7d3706ac986d177927f226a4fb4bd1b6cf9903c6e06290aa2f9d67be759f24a053b7e42b98d3a3edf01fa518a7d1b43c05b22e9d76007619ed99d1244ffb5c1adf4e080e6f3560fb08c047182f41055619d7461029900774bb15f0c920de5363f2c8aeb35ed70cbb2fe2fe81fa4b49a3d72b640ef26b5eab677adab542bbe18fd67b5390b2ca07f7138e2395930ec4c9dff81e1f0dba88972a8b8c0be7ead811d6f02ea1164f8b30e8ff19722c722a7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8b}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x260, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "e360a24bc2c1da69d9c997c459ef0ea7f782db520b777fdb692f2d72ef50f9d74464b1b8499769356a1294b0422b96bf0663fd889e82b9ec682aa0b424754eaebe2874893ec68f7c9182dc4dcb354035b52afc298ba06503bcfb3fffc50a8ee8a6adfaa7fd9d6fd1418d973528f9c404689cc1c89e9dc28cbb67d417254886ac852d84e8c4a64c0fa216bc1500c590edadeb32f9f33588197ee5fe9203372ccaf30bf93a4f21268935addc3c3191a9c5858066a396632053"}, @NFTA_DATA_VALUE={0xf5, 0x1, "48d2c71bac2c22ca3915f446be97fbb1541d8f2cf44c157ffd856aeee7f307ec9174b622ec155eb726d04cd7ee4afae0dd70d67e1280b2a82c6338fadfc02eb34de2ab8349244c81984e1fdaec6fbe173d0587d63d530873eaafb50c2260fd34b462154e7fdaa11c53d507394fbe5858c5923f2149fce3dd2632f7a0356a1ef914aa5a218f1fef63a359423f06be080cbb33a7b468037052cd123483cdda78ae496913a83b3ea9b3cd39bb01cd9668849cf3485c50d1148653fd22f57a82381fde1b6ec47aa8c8ded5af792f755ceef8b9f0760cfffb7b44c8b65f56d4d781fa56cc5bb3153d9bed0c0301d8d749983eb5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x65be1afcc2a97f23}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x54}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x20}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x80000080}, @NFTA_SET_USERDATA={0x2f, 0xd, 0x1, 0x0, "82cb3dda19e49ad13da77818eb953dc10ac05a393ba49f0dc22f0bf658dca0dd01f0c8ff41d79c5326265c"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}]}], {0x14}}, 0x5f9c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) shutdown(0xffffffffffffffff, 0x1) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 19:27:57 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x600000, 0xa2, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x2a, 0x10000, 0x2, @mcast2, @loopback, 0x30, 0x40, 0x0, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x8000000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x600, 0x0, 0x0, "0000000000000000000000e1ceeed2468761b20000080000000000373300"}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 19:27:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 224.575375][ T26] audit: type=1800 audit(1602185277.269:5): pid=8457 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15751 res=0 errno=0 19:27:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000200)={0x0, 0xc, [0x5, 0x9, 0x9]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) chdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) write$binfmt_aout(r2, &(0x7f00000002c0)={{}, "", [[], [], [], [], [], [], [], []]}, 0x820) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) keyctl$set_reqkey_keyring(0xe, 0x5) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x70a9}, &(0x7f0000000080)=0x8) 19:27:58 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x2d8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa71d03f2a0f9be19) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, 0x0) [ 225.551914][ T26] audit: type=1800 audit(1602185278.249:6): pid=8504 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15751 res=0 errno=0 19:27:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xf654, 0x0, 0x5}, {0x7, 0x1f, 0x7, 0x8}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x3c, 0x0, 0x5}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000010) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) fcntl$getflags(r2, 0x3) 19:27:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) finit_module(r1, &(0x7f0000000040)='\x00', 0x2) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0), 0x4) socketpair(0x1e, 0x6, 0x5, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2bcf) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="c000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710094000200180001001f0000001e0e0000e90512945768e540000000c5790000030000001800010004000000ff00f5f43da138de361b780000fc00000000000000ffff00001800010081e1ffffff030000050000000700000007000000181001000000000002000000c00c0000070000000200000018000100f70000000000007005000000060000000800002fb2d538002a4915000a0500000800000009"], 0xc0}}, 0x0) 19:27:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgsnd(0x0, 0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x2a, 0x101}, 0x0, 0x0, 0x10001, 0x101, 0x4, 0x8, 0x7, 0x6, 0x8000, 0x1d51, 0x0, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x62}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0xfc}, &(0x7f0000000200)=0x8) timer_settime(0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0], &(0x7f0000a8a000)=0x8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 19:27:58 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x608000, 0x6) sendto$inet6(r7, 0x0, 0x0, 0x40, &(0x7f0000000540)={0xa, 0x4e20, 0x20446e07, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001fc1e8e6f4ed158770000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) lstat(&(0x7f0000000380)='./file0\x00', 0x0) r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x60, 0x20000000}, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x7}], {0x4, 0x9493bd92b754f0c8}, [{0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x4}, {0x20, 0xd}}, 0x3c, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f00000003c0)=@isdn={0x22, 0x60, 0x7, 0x2, 0xff}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="b85e820d34bb1794717a6031e5ec022c18604688e4e59a3e09064bc4ed00b139368f8caba38b08bcab458f3877fded65740d091ffb61b0b147aa1897ccbd4c76db427152b48f6f54d543e4d8b4709f24bb571db6bb0bb952c2d5e8955829e903b0a4388dede6e9d70f3d400999915fe08ac578b1ef87c0c1deba92c59dddc69b9a631d5de1387a24b5921e398bcad430f4137deaa10a61d2615d2baff28b9856ed9103bac5017cbf5a00c2ebcb", 0xad}, {&(0x7f0000000780)="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", 0xfd}, {&(0x7f0000000880)="bf2f018776d8e98ef9e752f39d9ab704664f3be7f8953d09bcc724fc35d62798041bb4e9c5235e6428b311d089d7780be9ec942ca5b3c0e1c256b2fd46d5430e5bf0514ee592eeaf62f3d31dbc677f7cc16c28496fab73d7e6be387869953563a4424254ecc7123bcb499ece5748b94f3bd6daf83c65d0ed06e48b996a64c96dd2feed225c8fd3d8cb2f45965e63c1a412c737803c2fd4850b1b6874d781d1cbd332c05bcb3b9efcd1d6", 0xaa}, {&(0x7f0000000940)="bbec8e56049e038b7e94310289d8ad4ad76168ffb3d8885e0898343b6e2593c543e9cb4b9c8e0ad31379c7bf7817bb2f63fa112889fe805df5b7b185668bdfc782c9b1bc2b188aac2d6747c2598f2e45fa3cc3798ac44b8d8f4a8fc9a9166fa4c475894ff7bcef6d5faff9cc39f1eb84fd7a41cade012a6eb9561bc44e8dc2d9fc71c2fb22789522404813f647ed9d9a5d076d1e67d736370685223eee06a489de2b30a05faa1650625248af24df9f536165e3b414390c41c2f973cb0add12d4cbab575a103969a315ea04513621e4e17a0c58ff14a8f4e72e", 0xd9}, {&(0x7f0000000a40)="e75542534851f9933e9d0de7c60516a48e79e047dfa965d7918718a0ea4a915b06a016116c16446f00214b7283107c6d0b54c2c665c5b1990ced870357b914a14327e339a29c5eb1d876933a60b9d4c261b48811e26507de1e622475546706674d54bc2b18028f1be9e733ff9b5fc2ce6e237c1e9d7a4b438cfc7f8b6db58fed8ab764629598a9141e0332a4b8c46ef06f6ea9203880856db640c7ad8ad898d80f6b66802118fb214fdb4531d993a40fd858c315ae762b87d14037a893bfbdca701d47b5a27f747bafe9ac2e04fb46a3566ae1166389eb5fa2e620ef3af14b2f01", 0xe1}], 0x5, &(0x7f0000000b40)=[{0x1010, 0x114, 0x8, "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"}], 0x1010}}, {{&(0x7f0000001b80)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001c00)="62f0bf3f5502b4caccff3cafbac01d97ee8b08c9d83069dce8ca6a5ca8c85561a2f0d092d501ee3435241f0ac3a9c772620ad794725fabc444fe30a19f5ef454876bee00d3af9b1fa6ecd83e81db4b4e8fdfa8799d4a4d05b1d2516ba14425484e4ad11c7b0470c608d78831683b1f8a87a03f8ee0f3b3a7b3f55437ddce2ba55bb75a9071", 0x85}, {&(0x7f00000024c0)="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", 0x11a}, {&(0x7f0000001dc0)="95009be273ee2ec1f2cb00658395bb5aca3ac9726305ec1a52488eaab59902ba190d4bc307eaf3cc91634eedc542cefbcb125a8b4151be7e0ca72e9ad417a94d24c7a77080035ecf26c9a715a36f068e8e5ba8de9c2ba0ce79067f52f959d204da5531eb930af53caedf3383ca", 0x6d}, {&(0x7f0000000040)="c4880820f52798b8d0f7435d92de6d2906827ec82b9c8b6ce3904cce1b79", 0x1e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e40)="e34d4e863fe4b4104d104f15cf2b494dbe1b673bc60c4e82e1b54800f84d169839684132378b66905f2d5f6c350bba5930a5fa17d40396c378d8e9702bb028c890da7c76fa253db8f9f17024af7a8cab76461aa25769b7c3593b80d6459fabe41a1fd5b34800db2eff7474e8487a9f1ebfc24553aba0b027c1f392d0a0d72f55d39af206f0fba105e2890fe23628c94613a00bc13f21cc2c90e4514af8b6c4605137f97e64b5ba8f0a67174916e4770646c28586e4306002103634d5c407355074b705831c1edef2729aabe946b5394f8da59414d30f4c50290d7dc711c001698ad9", 0xe2}, {&(0x7f0000001f40)="beb212aea374341722238a5896fef50056aa6db1292f9345648678ec63f6d5fb32eff866bfc1a1d4c48fcebeb695e4bc50ff51bda80fe09564627c63573db828a0759488732288234b0127931105", 0x51}], 0x2, &(0x7f0000001fc0)=[{0xe0, 0x1, 0xfffff001, "eeafd7609d9737535d7175cfa39d978bd772c05d496ff71e53d65385d147c4cedf4a7ae655ba86afdf36ae4b0613f314cde1ba7567b25a05918e4e484f24cca3e5c6f6d0969d6fc30edd972afc64f0bf94f9f71d51f0a449ca2e8c9d5b96e9f838ca48baea14789ee82b039f7b591db590fdc8ecd9a34fc0c1565fa14b176449052c47488c227dcc3470a67b247e35a9d18382a273adcc65e5b2b8193f3ca8f7dda27dc4e652e3268b12d5c7ec5d566abcbf3c84f4e1aa6f868ea2637549d7a3a6249a2ac116fe4df73bb5e58a"}, {0x108, 0x103, 0x6, "4e1d4ab360bb6e8c2f9b630e495924c183641280f86c729f051decac6ab6cea737ab91444029bf4ce1fd72a6d564455ea95cdef10e5ec8db815e3a7df3d948509b58c02757b3f1eb1ecabc27d0ab5abe0cee7f20a044edafff95eb98fcc80b0286a72c4c47846e55264b59484ad59511c63b9c49a878f51fe478e85cba496f87e0efbf055fbad7e067b9b936b0174260c9f845bb3814a2b08b4fa2810c1426944fe487d6e7ba9a2fd0fe90d817ec4d1738083bf67d600d5cb7f4a5dd6f0a80b54d6c0c9ffb4ebf713b99cc258784fdbdae9c0e7cff2ce0476937fe6ea955caa42d1e41d735192357d5ce7179cc8e5cf9f3856b05"}, {0x60, 0x88, 0x100, "d411fe71065941dc40a6de5b0248f9aadd94d38403ed6003a002aab05e7266a188952414ea8345cb0f54db9ebf195a42db4eceb4cf99bfbe42e2531d14868d75f2efc06569fbc2beb07c"}, {0xa0, 0x16, 0xe2a3, "53699fa253e19d039b2a672835612c853b2d8baaf22e73da9674846f8edf2080786f71ef1e5f861716c20e944f49f95181c3e551648ea9fc5262b8da7917801f0e61b39f4ccb8c7fd97190d5c988d7c69ad5748592d2ddfbaeaffdb2b90640ca4653a9c6578345a22db1417dea76730d7a43c42b03369c603f7e053590ea7777294788dc29acd89515d87f3380"}, {0x68, 0x118, 0x3, "8f36d9e7d2b85d536fde1dba49e40c51c00e80d48acf1f11c0b8c57f44b87996848feaadc32980cfaf145f90904decc33f9557e042806f97b1568d2d9b6aeb0047dab087cf905f93a0c3c9c96af1322a187062"}, {0x40, 0x112, 0x5, "a5a6ef40b84c7e2d8c6788744ee7273c237c0b65a2992234e964149d4ed7ceb1224c4d0fa3a14753d5a017fb2c73"}, {0x78, 0x84, 0x800, "4465df21cb50e02dbe4ef297204811432341a21c1ba679bc419ae7702d74014ac2dadd1b4f33c0ed0f7a2fd9067b6ec651e2c9217da0d1da574c50d4fb57fa04dbd5dc0d8e4610fffc3ac1112a2ad9a4c0e2945a33843163f17340a738be6b4001b9d8f2"}], 0x408}}], 0x3, 0x80080) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 225.839035][ T8511] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. 19:27:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 225.926635][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.968020][ T8518] device dummy0 entered promiscuous mode 19:27:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xf654, 0x0, 0x5}, {0x7, 0x1f, 0x7, 0x8}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x3c, 0x0, 0x5}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000010) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) fcntl$getflags(r2, 0x3) [ 226.022585][ T8520] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.050479][ T8521] device bridge_slave_0 left promiscuous mode 19:27:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) finit_module(r1, &(0x7f0000000040)='\x00', 0x2) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0), 0x4) socketpair(0x1e, 0x6, 0x5, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2bcf) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="c000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710094000200180001001f0000001e0e0000e90512945768e540000000c5790000030000001800010004000000ff00f5f43da138de361b780000fc00000000000000ffff00001800010081e1ffffff030000050000000700000007000000181001000000000002000000c00c0000070000000200000018000100f70000000000007005000000060000000800002fb2d538002a4915000a0500000800000009"], 0xc0}}, 0x0) [ 226.070113][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.089174][ T26] audit: type=1326 audit(1602185278.790:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8514 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460c8a code=0x0 19:27:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) finit_module(r1, &(0x7f0000000040)='\x00', 0x2) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0), 0x4) socketpair(0x1e, 0x6, 0x5, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x2bcf) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="c000000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710094000200180001001f0000001e0e0000e90512945768e540000000c5790000030000001800010004000000ff00f5f43da138de361b780000fc00000000000000ffff00001800010081e1ffffff030000050000000700000007000000181001000000000002000000c00c0000070000000200000018000100f70000000000007005000000060000000800002fb2d538002a4915000a0500000800000009"], 0xc0}}, 0x0) 19:27:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x121}, 0x18}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r3, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x254, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0xf654, 0x0, 0x5}, {0x7, 0x1f, 0x7, 0x8}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x3c, 0x0, 0x5}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x20004800}, 0x24000010) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) fcntl$getflags(r2, 0x3) 19:27:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 226.378238][ T8533] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.427096][ T8536] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.728618][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 19:27:59 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffee) splice(r1, 0x0, r1, 0x0, 0xfdec, 0xb) 19:27:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2c4a, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100013070000000000000000000000000200000000000000000000017f00000100000000000000000000000000000000000000000000d43900000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004c0014006469676573745f6e756c6c"], 0x13c}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 19:27:59 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_getattr(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x14, 0x26, 0x8, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000, 0x0, 0x810}, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x4, [0x1cedef1c, 0x10001, 0x9, 0x4]}}) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f00000002c0)=""/90, &(0x7f0000000340)=0x5a) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @local}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xdd$[!{\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x1800) syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x5, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x4f, r3, 0xd}, 0x14}}, 0x4010000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000b80)={0x8, 'batadv_slave_1\x00', {'vxcan1\x00'}, 0x3ff}) 19:27:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x8, &(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) recvfrom$inet(r3, &(0x7f0000000280)=""/149, 0x95, 0x0, &(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x24000890) syz_open_dev$video(0x0, 0x724000000000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000000c0)={0x1, 0x100, 0x5, {0x7, 0x400, 0x6}}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x4, [0x400, 0x20, 0xfffffffffffffff8, 0x7]}) 19:27:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:27:59 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = open(&(0x7f00000002c0)='./file0\x00', 0x608000, 0x6) sendto$inet6(r7, 0x0, 0x0, 0x40, &(0x7f0000000540)={0xa, 0x4e20, 0x20446e07, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001fc1e8e6f4ed158770000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) lstat(&(0x7f0000000380)='./file0\x00', 0x0) r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x60, 0x20000000}, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x7}], {0x4, 0x9493bd92b754f0c8}, [{0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x4}, {0x20, 0xd}}, 0x3c, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f00000003c0)=@isdn={0x22, 0x60, 0x7, 0x2, 0xff}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="b85e820d34bb1794717a6031e5ec022c18604688e4e59a3e09064bc4ed00b139368f8caba38b08bcab458f3877fded65740d091ffb61b0b147aa1897ccbd4c76db427152b48f6f54d543e4d8b4709f24bb571db6bb0bb952c2d5e8955829e903b0a4388dede6e9d70f3d400999915fe08ac578b1ef87c0c1deba92c59dddc69b9a631d5de1387a24b5921e398bcad430f4137deaa10a61d2615d2baff28b9856ed9103bac5017cbf5a00c2ebcb", 0xad}, {&(0x7f0000000780)="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", 0xfd}, {&(0x7f0000000880)="bf2f018776d8e98ef9e752f39d9ab704664f3be7f8953d09bcc724fc35d62798041bb4e9c5235e6428b311d089d7780be9ec942ca5b3c0e1c256b2fd46d5430e5bf0514ee592eeaf62f3d31dbc677f7cc16c28496fab73d7e6be387869953563a4424254ecc7123bcb499ece5748b94f3bd6daf83c65d0ed06e48b996a64c96dd2feed225c8fd3d8cb2f45965e63c1a412c737803c2fd4850b1b6874d781d1cbd332c05bcb3b9efcd1d6", 0xaa}, {&(0x7f0000000940)="bbec8e56049e038b7e94310289d8ad4ad76168ffb3d8885e0898343b6e2593c543e9cb4b9c8e0ad31379c7bf7817bb2f63fa112889fe805df5b7b185668bdfc782c9b1bc2b188aac2d6747c2598f2e45fa3cc3798ac44b8d8f4a8fc9a9166fa4c475894ff7bcef6d5faff9cc39f1eb84fd7a41cade012a6eb9561bc44e8dc2d9fc71c2fb22789522404813f647ed9d9a5d076d1e67d736370685223eee06a489de2b30a05faa1650625248af24df9f536165e3b414390c41c2f973cb0add12d4cbab575a103969a315ea04513621e4e17a0c58ff14a8f4e72e", 0xd9}, {&(0x7f0000000a40)="e75542534851f9933e9d0de7c60516a48e79e047dfa965d7918718a0ea4a915b06a016116c16446f00214b7283107c6d0b54c2c665c5b1990ced870357b914a14327e339a29c5eb1d876933a60b9d4c261b48811e26507de1e622475546706674d54bc2b18028f1be9e733ff9b5fc2ce6e237c1e9d7a4b438cfc7f8b6db58fed8ab764629598a9141e0332a4b8c46ef06f6ea9203880856db640c7ad8ad898d80f6b66802118fb214fdb4531d993a40fd858c315ae762b87d14037a893bfbdca701d47b5a27f747bafe9ac2e04fb46a3566ae1166389eb5fa2e620ef3af14b2f01", 0xe1}], 0x5, &(0x7f0000000b40)=[{0x1010, 0x114, 0x8, "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"}], 0x1010}}, {{&(0x7f0000001b80)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001c00)="62f0bf3f5502b4caccff3cafbac01d97ee8b08c9d83069dce8ca6a5ca8c85561a2f0d092d501ee3435241f0ac3a9c772620ad794725fabc444fe30a19f5ef454876bee00d3af9b1fa6ecd83e81db4b4e8fdfa8799d4a4d05b1d2516ba14425484e4ad11c7b0470c608d78831683b1f8a87a03f8ee0f3b3a7b3f55437ddce2ba55bb75a9071", 0x85}, {&(0x7f00000024c0)="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", 0x11a}, {&(0x7f0000001dc0)="95009be273ee2ec1f2cb00658395bb5aca3ac9726305ec1a52488eaab59902ba190d4bc307eaf3cc91634eedc542cefbcb125a8b4151be7e0ca72e9ad417a94d24c7a77080035ecf26c9a715a36f068e8e5ba8de9c2ba0ce79067f52f959d204da5531eb930af53caedf3383ca", 0x6d}, {&(0x7f0000000040)="c4880820f52798b8d0f7435d92de6d2906827ec82b9c8b6ce3904cce1b79", 0x1e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e40)="e34d4e863fe4b4104d104f15cf2b494dbe1b673bc60c4e82e1b54800f84d169839684132378b66905f2d5f6c350bba5930a5fa17d40396c378d8e9702bb028c890da7c76fa253db8f9f17024af7a8cab76461aa25769b7c3593b80d6459fabe41a1fd5b34800db2eff7474e8487a9f1ebfc24553aba0b027c1f392d0a0d72f55d39af206f0fba105e2890fe23628c94613a00bc13f21cc2c90e4514af8b6c4605137f97e64b5ba8f0a67174916e4770646c28586e4306002103634d5c407355074b705831c1edef2729aabe946b5394f8da59414d30f4c50290d7dc711c001698ad9", 0xe2}, {&(0x7f0000001f40)="beb212aea374341722238a5896fef50056aa6db1292f9345648678ec63f6d5fb32eff866bfc1a1d4c48fcebeb695e4bc50ff51bda80fe09564627c63573db828a0759488732288234b0127931105", 0x51}], 0x2, &(0x7f0000001fc0)=[{0xe0, 0x1, 0xfffff001, "eeafd7609d9737535d7175cfa39d978bd772c05d496ff71e53d65385d147c4cedf4a7ae655ba86afdf36ae4b0613f314cde1ba7567b25a05918e4e484f24cca3e5c6f6d0969d6fc30edd972afc64f0bf94f9f71d51f0a449ca2e8c9d5b96e9f838ca48baea14789ee82b039f7b591db590fdc8ecd9a34fc0c1565fa14b176449052c47488c227dcc3470a67b247e35a9d18382a273adcc65e5b2b8193f3ca8f7dda27dc4e652e3268b12d5c7ec5d566abcbf3c84f4e1aa6f868ea2637549d7a3a6249a2ac116fe4df73bb5e58a"}, {0x108, 0x103, 0x6, "4e1d4ab360bb6e8c2f9b630e495924c183641280f86c729f051decac6ab6cea737ab91444029bf4ce1fd72a6d564455ea95cdef10e5ec8db815e3a7df3d948509b58c02757b3f1eb1ecabc27d0ab5abe0cee7f20a044edafff95eb98fcc80b0286a72c4c47846e55264b59484ad59511c63b9c49a878f51fe478e85cba496f87e0efbf055fbad7e067b9b936b0174260c9f845bb3814a2b08b4fa2810c1426944fe487d6e7ba9a2fd0fe90d817ec4d1738083bf67d600d5cb7f4a5dd6f0a80b54d6c0c9ffb4ebf713b99cc258784fdbdae9c0e7cff2ce0476937fe6ea955caa42d1e41d735192357d5ce7179cc8e5cf9f3856b05"}, {0x60, 0x88, 0x100, "d411fe71065941dc40a6de5b0248f9aadd94d38403ed6003a002aab05e7266a188952414ea8345cb0f54db9ebf195a42db4eceb4cf99bfbe42e2531d14868d75f2efc06569fbc2beb07c"}, {0xa0, 0x16, 0xe2a3, "53699fa253e19d039b2a672835612c853b2d8baaf22e73da9674846f8edf2080786f71ef1e5f861716c20e944f49f95181c3e551648ea9fc5262b8da7917801f0e61b39f4ccb8c7fd97190d5c988d7c69ad5748592d2ddfbaeaffdb2b90640ca4653a9c6578345a22db1417dea76730d7a43c42b03369c603f7e053590ea7777294788dc29acd89515d87f3380"}, {0x68, 0x118, 0x3, "8f36d9e7d2b85d536fde1dba49e40c51c00e80d48acf1f11c0b8c57f44b87996848feaadc32980cfaf145f90904decc33f9557e042806f97b1568d2d9b6aeb0047dab087cf905f93a0c3c9c96af1322a187062"}, {0x40, 0x112, 0x5, "a5a6ef40b84c7e2d8c6788744ee7273c237c0b65a2992234e964149d4ed7ceb1224c4d0fa3a14753d5a017fb2c73"}, {0x78, 0x84, 0x800, "4465df21cb50e02dbe4ef297204811432341a21c1ba679bc419ae7702d74014ac2dadd1b4f33c0ed0f7a2fd9067b6ec651e2c9217da0d1da574c50d4fb57fa04dbd5dc0d8e4610fffc3ac1112a2ad9a4c0e2945a33843163f17340a738be6b4001b9d8f2"}], 0x408}}], 0x3, 0x80080) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 226.830290][ T8521] syz-executor.2 (8521) used greatest stack depth: 23248 bytes left 19:27:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fallocate(0xffffffffffffffff, 0x40, 0x9, 0x7) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x5ba682, 0xaeb2fdd41834dde0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) getsockname(r0, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000001c0)=0x80) sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x1d, r3, 0x1, {0x1, 0x1}, 0xfe}, 0x18, &(0x7f00000003c0)={&(0x7f0000000380)="fc982e8b78fd961515c04e3b892109e442e3b753d4b6ac1bf4a4813c198a834d1062cc6bf39ef7579ebe7d5c5bdf2546e27e8c85e23d6c4268", 0x39}}, 0xc3) timer_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000080)={0x0, 0xff, 0x8, &(0x7f0000000040)=0x79}) 19:27:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 227.024780][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 19:27:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x1, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x700, 0x7800, 0x7, 0xa9fa}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_ext={0x1c, 0x6, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0xd, 0x2, 0x5, 0x1, 0x8}, @ldst={0x2, 0x3, 0x3, 0xc, 0x3, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x10, &(0x7f0000000100)=""/16, 0x41000, 0x2, [], r5, 0x0, r1, 0x8, &(0x7f0000002300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0xc, 0x21, 0x4}, 0x10, 0x6c89, r1}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="b9800000c03500400000665c0f5d0202f50bf39affb31c9aff35c5e17de74b064000c466ba4000ec00f30fbcf70f01c4db3af566b82001400f009c91410000002e66420fc73326650fae15fbffffffed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff14}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 227.118404][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 227.144586][ T8555] device vxcan1 entered promiscuous mode [ 227.186990][ T8555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.195225][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 19:28:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 227.225150][ T8570] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 227.245659][ T26] audit: type=1326 audit(1602185279.950:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8554 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460c8a code=0x0 19:28:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000), &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/7, &(0x7f00000000c0)=0x7) 19:28:00 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb6}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400000c}, 0x44000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) [ 227.327762][ T8551] syz-executor.0 (8551) used greatest stack depth: 21784 bytes left 19:28:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="e561c74424002b000000c7442402e2eba3dbc7442406000000000f01142466b879008ee8660f38821e2e430f01df0f7f93366fdc64b9800000c00f3235000400000f300f017d5666baf80cb800541f89ef66bafc0ced670f7906", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000000)={0x63d, 'syz1\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2001, 0x0) syncfs(r5) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:28:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 227.494526][ T8583] IPVS: ftp: loaded support on port[0] = 21 [ 227.999677][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 228.327397][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 228.380718][ T76] tipc: TX() has been purged, node left! 19:28:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) r7 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000013001d04000058650018eeff070002c0", @ANYRES32=0x0, @ANYBLOB="02000000006c0000"], 0x20}, 0x1, 0x5e, 0x0, 0x40000}, 0x80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f0000000300)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f00000001c0)}}, &(0x7f0000000240)=0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000540)=0xc) sched_getaffinity(0x0, 0x8, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="d000000013001d040000000000000000080002c07a45c0099e0053b8da869a320c15b8d21dadab919a63bd1d1ed3874ba4b9e7dc25e88e1d5064696f4fcf358415081c005edf521a4f9baebdeca5f8dc4a4a114edd8b3f82f8dd2dfc392c03145382505b20aacd2f03887dac9635a2e16d1f4cc55a21a87710879cae00774c8c5f91c1576415461113a7f23b8e6157edce7a8766001caf8f02b276117d2df8c77d5f2e", @ANYRES32=0x0], 0xd0}, 0x1, 0x5e}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x40040, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000003c0)=""/246, &(0x7f0000000340)=0xf6) 19:28:01 executing program 2: syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "1c56b7019a5c268551fdf0802747a04e"}]}, 0x4, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x1e, &(0x7f0000000000)=@string={0x1e, 0x3, "02000400005d898faf821e2c7cfa439ccde548d67b3fd76cf2c60c00"}}, {0x28, &(0x7f00000002c0)=@string={0x28, 0x3, "c76ce4b05256f53d5012d70e7d85fc32b67e98b9f9780453936837b4f7990fff798addd85187"}}, {0x0, 0x0}]}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x140b, 0x624, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 19:28:01 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc0020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3ffc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x70, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044000}, 0x4085) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffe90, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, 0x0, 0x4, 0x70bd2c, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000002}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}}, 0x61e70804a61f6482) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000240012800b0001006970766c616e000014000280060002000200000006000200000000000a000500040000000000000008000a00", @ANYRES32=r5], 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x27, 0x8f, 0x0, 0x0, 0x24, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3987fc273e1624df, 0x0, 0x1, 0x5}}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000180)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0xd044) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 228.598800][ T8637] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 228.620495][ T8637] device ipvlan2 entered promiscuous mode [ 228.688703][ T8642] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 228.701951][ T8642] device ipvlan3 entered promiscuous mode [ 228.829109][ T35] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 229.235320][ T35] usb 3-1: not running at top speed; connect to a high speed hub [ 229.315206][ T35] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.338903][ T35] usb 3-1: config 1 interface 0 has no altsetting 0 [ 229.384939][ T35] usb 3-1: language id specifier not provided by device, defaulting to English [ 229.714758][ T35] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.723825][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.745043][ T35] usb 3-1: Product: 泇냤噒㷵ቐ໗蕽㋼纶릘磹匄梓됷駷／詹蝑 [ 229.753721][ T35] usb 3-1: Manufacturer: 崀辉芯Ⱎ塚鱃홈㽻泗웲 19:28:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb6}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400000c}, 0x44000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) 19:28:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000100)={0x8001, [0x8, 0x2, 0x5], [{0x20, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x100, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xfffffff9, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x6, 0x1}, {0xffffffff, 0x98da, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x101, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x47, 0x0, 0x1, 0x1}], 0x6}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x10}]}, 0x28}}, 0x4000000) [ 230.024676][ T35] usblp: can't set desired altsetting 4 on interface 0 [ 230.060667][ T35] usb 3-1: USB disconnect, device number 2 19:28:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:02 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1e}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:system_map_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40840d5}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000001c0)={0xa, 0x4, 0x200, 0x84f2}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000600)={0x1b1, 0x13, &(0x7f0000000200)="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"}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="833695d1b54d", @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0xe0000000, @multicast2=0xe0000001}, @address_request={0x12}}}}}, 0x0) [ 230.198187][ T8673] IPVS: ftp: loaded support on port[0] = 21 [ 230.228859][ T26] audit: type=1800 audit(1602185282.931:9): pid=8672 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 errno=0 19:28:03 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, 0x457) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000cc0)={"94a76cfadfe0487de799ab5224f30b31ce20c493f083bf6b9f8fa3be623eab68f2bdcadbe6815fa84c01d71918f78f4a0810045edc5cdaddba7d1c4621ea277b58542a327b736d1d9a0d3f8c02180d2a38f8e11f7405242f4b316dc95a38c049935f54e2e9f7a3d3214eb3cefe450e648468bac8fcc88c20ba93228a5cd131df7e9a057c18e3a7b714fe78189479a457b636e590267b84d01cd9576a7bf239e3c2a6533e078b0deb0718f45a17b2378c3602f778015bdf14cb6386cba69303164a934072d68933a89822787d4856494fa065fb7fdfe23405cf3b9a2662647e7c33c2972e661c6987b940645d7893f0d2998e7fb4789019b16ccb0924e6976693064706f9266d33b5f91583b464e6e296273cc9f430c7e6fc9a09c2323f40e62f8e3a0e8499ee917edcad206c80745d1e34a3820f7d8d36c4e336980add4657758d67f21bf7620af60005887f4f821f59bdc821535920f40c2e1ae070a1964ba2cac5c88aa134f327fe01e442100e257233644a32577cee590586aa036b24655f4ce57521fa5bf1c2a718709d60ab63b386b90181ed4207824115cab9d0ce74288488081fb529914047d2f79d70cef51baf41e77c82dee622f26d2ad21919734995190afa802b74b657205fb9a1a444a10b28ca81b64390abb7ce6bc21c58c96c08e15cf18d2259d10840edd42a16783b776ddfd2e3e196a8b4e838d7d33395080fb073425766a6d8ddaf4284ac94bc79ed8b1d26a28f342e23d050576e37429a95a85f60a781b52e14a948ef139a70c23fbdfc45bb662975ab97ac7934802e555e1ee6496da1a3e0e7bbc29fe27cf88b87e351c8f30490c6b35d3b465d8407b3002ac30133a29ddba6d96d0463adc719c38f59b90d60a092b6a1bf4781bb761830fe4030b3b6243a5adca0c3fafa6e6e6f5044517dd539ab3fc35f92888727bb07b1ec7df45b60a28f81a2cdd1def8ad2065a77d24da59dd71b59c52d53018897b0424d17325b20870a63c2918277ef8b24fe206c30c4b2e4a7aabbc8bd283c23b10a5e2645efba5a930e6ff3cc1b07fa2ee71826d12f276aa5faa69c664f93be2caace65df0cd9ec0a842508a0ac0cb0b0628759e377b713c637be817b0aa070c2dfef3b0d638cd509c4e99aeb787e3ff91273e42db868569afd0ab539116a385d7ec626225ede3b610f4250c2453c7e3ded25fd986530fabf0e0a9374810fed28ddc773527b98adb3711a02d401b2ff0ca1ef3c81a9f37e5680cac444adc5654d214f2a79fdf7d40d70d3fbbdfd9abbbb20dbdbdea7b0871f2e77d095270fcd5626c3bb487cb3ab0c743ae14a7e1e4842904459de8678ebc70f243641d81c372e8ef49b2180157de56f8ac60faa34beec5377c4d617fb88f1aa9a84e7e87cbdd2770dc62b5cef347ba180c67ee850a7c3d9293256be03cba73e9b7ceb1e934"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file1\x00', r3}, 0x10) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) 19:28:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 230.370481][ T26] audit: type=1800 audit(1602185283.071:10): pid=8678 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15760 res=0 errno=0 19:28:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000b976244a7d2000000000000000"], 0x5c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 19:28:03 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 230.669655][ T26] audit: type=1800 audit(1602185283.371:11): pid=8718 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 errno=0 [ 230.784605][ T35] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 231.063687][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.198069][ T35] usb 3-1: not running at top speed; connect to a high speed hub [ 231.284564][ T35] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.298957][ T35] usb 3-1: config 1 interface 0 has no altsetting 0 [ 231.344660][ T35] usb 3-1: language id specifier not provided by device, defaulting to English [ 231.373204][ T76] tipc: TX() has been purged, node left! 19:28:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000b976244a7d2000000000000000"], 0x5c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 19:28:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:04 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000040107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d1", 0x39}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001046bf48e3e3caf6ae001fff00000568", @ANYRES32=0x0, @ANYBLOB="000000fbff000000280012800a00010076786c616e00000018000280140016"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xc0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1f}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7b, 0x5, "b1425c0c130a6d0cb3adf935e871df565b44fa3bfcffe2395bbf00c1c2799e7ce9d5c04f6d5dd652f267b4a753b87e347867ff34f247350baa8e4fa6aae65793e94bf195f1cabf4798522e37fe21099376bc53566a605f5f4d2eb288a7efa78d71c155e8c1e0687a5698e7576a5d44b1e10366d9c1d24e"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004100}, 0x40084) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 19:28:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getdents(0xffffffffffffff9c, &(0x7f0000000200)=""/109, 0x6d) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@remote}, {@in6=@empty, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "c06b40043377fd5c33cbc721c7c0538f"}}]}, 0x14c}}, 0x0) [ 231.556255][ T35] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 231.572948][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:28:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x3, 0x80, 0x9, 0x8001}]}, 0x10) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) [ 231.626711][ T35] usb 3-1: Product: 泇냤噒㷵ቐ໗蕽㋼纶릘磹匄梓됷駷／詹蝑 [ 231.676213][ T35] usb 3-1: Manufacturer: 崀辉芯Ⱎ塚鱃홈㽻泗웲 19:28:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 231.719931][ T26] audit: type=1800 audit(1602185284.421:12): pid=8756 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15762 res=0 errno=0 19:28:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x4, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4188aea7, 0x0) [ 231.764399][ T35] usb 3-1: can't set config #1, error -71 [ 231.783779][ T35] usb 3-1: USB disconnect, device number 3 19:28:04 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) 19:28:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) setrlimit(0x2, &(0x7f0000000180)={0x2, 0x7}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r3, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x402804}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x104, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x34}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x406c800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x45) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4080, 0x0) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000040)) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 19:28:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:04 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) [ 232.196976][ T8781] mmap: syz-executor.2 (8781): VmData 37515264 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. 19:28:05 executing program 3: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000300000054000280140001000000000002000000000000000000000006000b000000000006000f0000000000080009000000000006000e0000000000140001000000000000000000000000000000000106000b00000000000c0003800800010000000000"], 0x74}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0724fc60100002400a000200051a82c137153e670402", 0x26}], 0x1}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020900", 0x33a) 19:28:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:05 executing program 4: mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x400902, 0x222) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000180)=""/180, 0xb4, &(0x7f0000000040)=""/4, 0x1, 0x3}}, 0x48) setxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x8}}, 0x24, 0x0) 19:28:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:05 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) [ 232.545067][ T8802] netlink: 254 bytes leftover after parsing attributes in process `syz-executor.3'. 19:28:06 executing program 5: prctl$PR_SVE_GET_VL(0x33, 0xb0e9) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4c, 0x0, 0x0) 19:28:06 executing program 4: syz_usb_connect$uac1(0x2, 0xf2, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x40, 0x20, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x3}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x5, 0x5, [0x2, 0x9, 0x9, 0x1, 0x1], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x4, 0x6a, 0x3, 0x41, 0x40}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x4, 0x3, 0x20}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x1, 0x2, [0x0, 0x4], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x99, 0x22}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x9, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x20, 0x58, {0x7, 0x25, 0x1, 0x2, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x100, 0x6, "1b7b60df98eb2900"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0xdb, 0x9, '\x00 ', "8b"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd7, 0x4, 0xc2, 0x2, "", "01"}, @as_header={0x7, 0x24, 0x1, 0x76, 0x0, 0x1005}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0x3f, "f02e5f4a4bd5a5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x2, {0x7, 0x25, 0x1, 0x0, 0x2b, 0x100}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x7f, 0x9, 0xff, 0x4a}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x0, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0xec, 0x5, 0x2c, 0x2, 0xfa}]}, 0x4, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "1a7b"}}, {0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "4217877135337ab104a152ab69c12fcdd2b79519d8b0f5f95884f4baa64efbb0e1f9f65e36ca2ed2c5e6580d2e4be1a2148fd187fb817330b06eaca2d5536b0821524c65613f9adb4a08e48ce7bda705917fd3487d19b3eb48f8731665559efc960f1b040733b1a848aaeb778bef9dec69c9682e0f8fe758b1f94d47be79ffbb72ffb288b2d198b5aba36f298c7cdbed231d592fbc70062f63ba0b3224d781e0f57b8253343bf0a6886968bf28c8b92cecce4c916d3466a07fb62266dadd879022699d98af4d16cdc029444b94"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}]}) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000400)=0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0xe3, "91f84aad9e4973bcd8316246e6289ce3da35bc50ebd820472f4727e810d230e545a51382581bee2a62935ff290ccce4d8c979eca274f8a301caa86c167a087c86242e2318d58f4b76cdaae31dab643b9448525962201e5ff35c7011341cfb4289672f8a2201776228234c9aba2ba2450c75126c0b4a72c40dead4d350e558ee9cd57697eba18723a49f51eb9f18c06de6b011bc61875cc0654a5ed0461c28e04c695894b20e56afb0cccee03237d67dc12bee2fa40dc705febef6124d23c0598047516fd65e45aa11bf04aad46a084cdd48cb94188a97b539af91f1a3b4b9737e16a6f"}, &(0x7f0000000580)=0x107) 19:28:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) syz_usb_connect(0x2, 0xba2, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x1a, 0x63, 0x57, 0x8, 0x930, 0x708, 0xafa2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb90, 0x4, 0x6, 0x1f, 0x40, 0x1f, [{{0x9, 0x4, 0x3d, 0x1, 0x7, 0x1, 0x3a, 0xd7, 0x29, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x9, "85a632"}, @as_header={0x7, 0x24, 0x1, 0xe4, 0x3e, 0x2}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x7, 0xd6, 0x40, [@generic={0x4e, 0x5, "5fdc4982839e88032a0afc0e9f4851e45733008975b7f919581bf7e50a8ff26ecf6537101e0d81902e99c7a1be1ec4706e175c448a1326896e06a1908a63a2e84f137bad1a1d0d28a7f9ed4a"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x20, 0x1, [@generic={0x84, 0xa, "e7bfe3e72b38947e8dc670ba7b6e3c8d8f72a6833a323c3fe7f51683f70d81a36c52cd529e73b456a70f69b1cd515d005ea029fbda8c1543bdb8adba009b451015c2363ef00b986b9733de299c509b7beda00ae1520a8b549ee0920a6ac9a25050be2c55f7c219aad6e4e5b476486133dc911046e76ead4869790903df8504d7f18b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0x2, 0x35}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xde, 0x5}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x1, 0x40, 0x2, [@generic={0x5, 0x10, "1839d6"}, @generic={0xc, 0xd, "33dcf4b8abc2aefa5d82"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x1f, 0x1, 0x7}}, {{0x9, 0x5, 0x80, 0x9, 0x10, 0x2, 0x5, 0x0, [@generic={0xd6, 0x1, "65d41dda9b48543770bca50cd10ae4c91467a0e3d5f6c10db66daa2bd0516403c942d2aa510a4ee2343dd87b3d5f503c41f89db550ea9c4c695da534104f322f807c0eae21cda2b59e983c97015c9bb952b050a317121670aa19284a044b9687c29219df234bc739080c67654da3110712db8d0427577cb7fb3f409035c169f43363bccfde4e3296cdf2f3423e13fb5aa031659860631dbbedffa2ae8d06349eef633895e3264bc41ee3d3cd08df13ea519af44d56c5418e6fd671861a955b4c93d0277ece4fb15af666c995f506b1f624ccdc0a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7, 0x7, 0xff, 0x3, 0x3a, 0x8, [@generic={0x61, 0x78, "6d7968c28133cc8b7608e4c85be8cb2a5c3fb4a604c35a18c027b2f332c635f241d6556236b1473640130f1db084436df0611f1118732ee413a8f7831b6b95ee50ccd73d564ab0b0bf65ed13c18ae6d850721d61e2f390feb0ab327f9f0627"}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x80, 0x7f, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x5ef, 0x7, 0x6, 0x1, [@generic={0xee, 0x22, "737b19dee6a11bdde62572a21ea37170f5916e15929964d275b2a1e37a25962a54c2995052e9785c53defc0cc514c432c35976496c8c1b7f77eb8b345a1c339f0fb57b55ff2e379b5e41487b381725b4e46b7b9e0182b62215f034964e7b78dd22adcc9b81c7a1a788ceaf8478ad92a953e7df658221a5a98e1e87006109947546e73feafd8fc758a5152b1cd1e75c507e526370c3a932de7290b7f888d34b658ed29985a9b5b9dc6529086758b3f70de78f0011ad2c28b206bcdccf8c780b7c4542c09a361b40e41e63d3bd33afbaefcb7486a6d3bfd10c812549171a10a30d1b0c18b0ded54b0ced6b94b0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9e, 0x80, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3f, 0xbd, 0x1f, [@generic={0x3d, 0x15, "88bb87a70d1c312bd3e5298f575d615ce4f77a010296d06024c943f7e5bf9b0c31cbce80f96787d6758df632afd9b827bda10acf7176d9621f4a8a"}]}}, {{0x9, 0x5, 0xb, 0x7, 0x200, 0x0, 0x6, 0x2, [@generic={0x3d, 0x24, "7d09eb65e3cc6ed1176e20b3f8742e35f6719786b7f3b3481f3b48d7da69095a1aef3437bbe0bac6ab5ee92d1a3d042d2b80ad8727b9958606c1ad"}]}}]}}, {{0x9, 0x4, 0x2c, 0x6, 0xf, 0x60, 0x8a, 0xa6, 0x7, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x1, 0x80, 0x1, [@generic={0x26, 0x23, "1c9cd87597d647794ee2960050c0d2a8210ea3612ff501d691dc464df4ee68d675aee516"}, @generic={0x6b, 0x1, "844225c8604fc0b355b47b861f96dc414d373987d4bbf428cb3c23621b60636f436ad8d295798299dbe67ca197521747de332b7c0d16840eed7b4d95e84f771d15c4e2345165ba67f4f1aed6f8fa07c8d9a81cfaade414adf1725b3667e866daafff902c355112d1e3"}]}}, {{0x9, 0x5, 0x80, 0xd, 0x400, 0x0, 0x63, 0xdd, [@generic={0x2c, 0x24, "b0ce6dd7219ee50e31a761caf7f3f99f07535ae68ba1082c0ac5b17676bd23f5ff1f25d8d4cc3773db10"}, @generic={0xcb, 0x30, "b55eddc0f3405c010662a7a8a7c3b92aba7726883988e4375a40e6eb5b6e89f63b5bce76fc19b9125320c5ff23be7bbd41e9b7398e401190d3852fc8d51a513578467154aa3eeab6ca2c147b0ae5eafc635921f5f2fc35c0eb52df4f5666a464dd3fcafecf496d420485b3e52c9de4c08312d1540ed02eb3cbf9b62992f4ce3a9fe380db46d15f1d2fd1f7146c31a3b897bbd052762b21bbbb369f9b54fe8e8d613ace8f69075cf2881a488cd3e6b2b462ce9900a354743d032a5c2c2ae5b62b4684267b7de6192faf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x4}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x2, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x90e}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x3f, 0x80}}, {{0x9, 0x5, 0x0, 0x2, 0x210, 0x2, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xca, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x6b, 0xf7, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x7d, 0x20, 0xff, [@generic={0xbc, 0x4, "6a9469304167ba64f446121b084e1643d4d8ac49ef72fe212ef1d5c991099421a8ec70b312de578c2ffd9ad552642ffe9758349fbf436a7f697c71dfe02cb1e0327ff0225104eb84cb74dacef6d715537c8ae0975c1e48aa684c2b1322df19ca17c96c5267b0735c50973b72e901426f62955bc14ba3e6b12a571bce6b325b005d40bb64db5820fdce2cf35d1da64fb506487d9b3c833ca91586e7c156340746149142af22e5ae951b4d15eb3c3479b344af15a60ba257eab55f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x81, 0x90, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x94, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xfd, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xfb75}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x1f, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x5, 0xd3, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xbf, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x4b, 0xff, [@generic={0xda, 0x22, "832bcec171ac35ee43e76549ae69e31f164faa794813d15f757357f1b576596fd67fdb1369130dce49785bbf89fbfe08412197108490de2dbce2b075f92b0ecde944f47ea23aabcfdf83d4e19861785237691442ee21bf3fab39fba198ac0a0c1d7e659dd44fcd4f2eef35627bf62892f3d968450e9de134bba38caf7565c63ec93cbc249705c9c86fad3a1100ae605e7bc3e7fedf9de699c14402d027c567048f872bf5815f19eb6556472ef4092266724fd22d4d86fd47dfde09d7f73b9a30e216acddefc0018eb64d483676f3bec42bb8a04a8c168e51"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x79, 0x1, 0xd, 0x79, 0x40, 0x8a, 0x20, [@generic={0x78, 0x9, "50a147afa041c0760e4c69a65109fc6746ea32da9a4faeb485aea0ad1fb49cf38e94310b8d2cc8f951cf11a6561ac6e58a38ed38375631cc15d7c93bc73c7ef43c190a1d78ebce392ded0178c881d85c41a49607cddf3fb283df59e0ff6653c3ec7d02535559a531e3bed69532029e296d63346ec975"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "17dc"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5b5d, 0x3, 0xfff8, 0x1}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x1f, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x2, 0x9, [@generic={0x82, 0x11, "083c9aff5da2642d5d8d302eb8ec23c24dec9467d97dadb8074cf929a1bf165d8a52fddd41ee4e8b8b58d45cb38530163983ae6f66ceaa955f95bf0c9b234f679823be82e7bd6dd172650b1742be058ea779bfced62e1372644f93925ff58c4ad14537b263637e7c43c767b977d509d5cc942f2269afdac04baca61eb250cbf6"}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x0, 0x4, 0x58, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x0, 0x20, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x58, 0x28, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbb, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2, 0x220, 0x40, 0x2f, 0x0, [@generic={0x56, 0x21, "bfcc87cce5e5598c6ec017360999b1b2a0fadd0c6092f8ef20a35b31c84fe1240c89760b66b80298b8965c3ac09438a132b173b066282cd6f9a0a318080127754b9643a27b8c1000e4bcb3f391518ceb1aa4c54b"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x3, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x5, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xc59d}, @generic={0x90, 0x2d, "eab473a472f91ddde5e366bba0048f86db7faa952c84ae51f25577b761527400cb8d313daece44b2084a36a560797cc08fb4a0f4843e624733110ab1db56a721875173cfc67b3b93f3fb48b1f09a5f816ca8b65980dea59167bea332ff19caafa212ad172b46271422c6ec66c7b828f8de28e16cf31acc5c43c5ef13cb2e861f3367e6d18211f8b4b5db1e9ee459"}]}}, {{0x9, 0x5, 0xd, 0x300a70409fb3c550, 0x200, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xf7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8a, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x240, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x5, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x100}]}}, {{0x9, 0x5, 0x83, 0x10, 0x200, 0x5, 0x0, 0x0, [@generic={0x9f, 0x6, "6620f8222de0afd573198d7485e74c472ec5e9f4686969d3662f3a2c2adcaeaea5c3a81a68503c4ea8c24a5b69e319d3fe450a6ce6d0e09cd2b7793daf4890c523880de743730bf7558691608239b26d4858fd57bfdfe1298147bc3e0e88bd2cf211524ebfa8d6076b6a5536081f59e97ce2465a9ff1225cc2343a62886345188c6d40b42e03079276477f32a5018ae8c05735803b7102ced8c5915679"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x81, 0xe0, 0x80, 0x40, 0x80}, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="070711"], 0x6, [{0x1a, &(0x7f0000000200)=@string={0x1a, 0x3, "20f1edd8d8274a9e3b3b6fe960983a73ff993103d4093657"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}, {0x61, &(0x7f00000003c0)=@string={0x61, 0x3, "32a55904c955d2d8f085abbb533f0d824b4c676a07fe4bd4f772942a41e8210bf7d2ae890994b1df5baaa2625d21664dfcfa0ea2921688ee7731054aab22fd341bf5a3395d399ec3007fde2a26af57bd512717255cae84748657ea6586e143"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1c0a}}]}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f00000004c0)={{0x5, 0x8}, 'port1\x00', 0x71, 0x2042c, 0x6, 0x6, 0x0, 0x80000001}) unshare(0x40000100) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380)='/dev/snd/seq\x00', 0x0) pidfd_getfd(r2, r3, 0x0) setreuid(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer2\x00', 0x480000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000001580)={0x9b6, 0x3, 0x1, 'queue1\x00', 0x7f}) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 19:28:06 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) 19:28:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000300)={0xe, {0x0, 0x6, 0x9, 0x6c, "5ec5fec28a47306220708a838f6ec5ef7dd0eaac17f8aa41effb4d84a3e3ac1f5a4f4edbd60c9da5ebd4d88afbc8dcca9e372750309bad09384a766355ebb575ba98b0c6e3e9d29ed2b2c11983c0c36b73dc2fa7a78a1cb982c4ba5bd288755ae4086b6de4abe3bd5fa6a556"}}, 0x78) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0fae570d0deece85e5d4360f0ff3b63ef0fe4e00ba420066ed66b891d7e4700f23c00f21f8663503000a000f23f80f060f30", 0x32}], 0x1, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="206ed9b5a2878c0f1700005c95ab70ceb56534003a1bbd5c57faa393217ceaaa66720081abb704efdb18122b43dff4c461db9db6a0d737344a614bbce9f8ee6a8c608c102885fb4ddc55af79515d3c0c9f6c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0xc814}, 0x0) 19:28:07 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 234.361387][ T3101] usb 5-1: new full-speed USB device number 2 using dummy_hcd 19:28:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 234.773745][ T3101] usb 5-1: not running at top speed; connect to a high speed hub [ 234.864754][ T3101] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 234.879537][ T3101] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.053555][ T3101] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.071814][ T3101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.099349][ T3101] usb 5-1: Product: ␁ [ 235.113312][ T3101] usb 5-1: Manufacturer: ᝂ熇㌵녺ꄄꭒ셩촯럒ᦕ냘淋葘뫴亦냻李延쨶툮൘䬮ꋡ輔蟑臻び溰ꊬ叕࡫刡敌㽡ࡊ賤뷧֧羑䣓᥽ᙳ啥ﲞྖЛ㌇ꢱꩈ矫쥩⹨輏壧鈴䝍禾믿ｲ袲톲떘ꎫ⥯粌ᴣ⽙炼⼆멣㈋휤篵厂㬴꛰榈뽨젨ⲹ컬酌㑭ꁦ뙿昢邇椢额䶯촖⧀䭄 19:28:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 235.191875][ T3101] usb 5-1: SerialNumber: ࠠ [ 235.363574][ T12] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 235.553402][ T3101] usb 5-1: 0:2 : does not exist [ 235.595694][ T3101] usb 5-1: USB disconnect, device number 2 [ 235.823834][ T12] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.894174][ T12] usb 4-1: not running at top speed; connect to a high speed hub [ 236.034410][ T12] usb 4-1: config 6 has an invalid interface number: 61 but max is 3 [ 236.042510][ T12] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 236.052706][ T12] usb 4-1: config 6 has an invalid interface number: 201 but max is 3 [ 236.061680][ T12] usb 4-1: config 6 has an invalid interface number: 44 but max is 3 [ 236.069927][ T12] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 236.078869][ T12] usb 4-1: config 6 has an invalid interface number: 106 but max is 3 [ 236.087252][ T12] usb 4-1: config 6 has an invalid interface number: 121 but max is 3 [ 236.096213][ T12] usb 4-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 236.105331][ T12] usb 4-1: config 6 has no interface number 0 [ 236.111403][ T12] usb 4-1: config 6 has no interface number 1 [ 236.117581][ T12] usb 4-1: config 6 has no interface number 2 [ 236.123730][ T12] usb 4-1: config 6 has no interface number 3 [ 236.129916][ T12] usb 4-1: config 6 has no interface number 4 [ 236.136098][ T12] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x5F, skipping [ 236.146742][ T12] usb 4-1: config 6 interface 61 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 236.157675][ T12] usb 4-1: config 6 interface 61 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 236.168665][ T12] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 236.179268][ T12] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 236.189930][ T12] usb 4-1: config 6 interface 61 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 236.203389][ T12] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 236.213055][ T2594] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 236.215098][ T12] usb 4-1: config 6 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 236.232573][ T12] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0x1 has invalid maxpacket 1519, setting to 64 [ 236.244509][ T12] usb 4-1: config 6 interface 201 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 236.255494][ T12] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 236.266768][ T12] usb 4-1: config 6 interface 201 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 236.277716][ T12] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 236.289018][ T12] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 236.300555][ T12] usb 4-1: config 6 interface 44 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 236.311324][ T12] usb 4-1: config 6 interface 44 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 236.322327][ T12] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 236.333119][ T12] usb 4-1: config 6 interface 44 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 236.343781][ T12] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 236.354550][ T12] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 236.365317][ T12] usb 4-1: config 6 interface 44 altsetting 6 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 236.378533][ T12] usb 4-1: too many endpoints for config 6 interface 106 altsetting 148: 105, using maximum allowed: 30 [ 236.389838][ T12] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0xE, skipping [ 236.401243][ T12] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0xE, skipping [ 236.412349][ T12] usb 4-1: config 6 interface 106 altsetting 148 has an invalid endpoint with address 0x80, skipping [ 236.424847][ T12] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x4, skipping [ 236.436426][ T12] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x9, skipping [ 236.447625][ T12] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x3, skipping [ 236.458785][ T12] usb 4-1: config 6 interface 106 altsetting 148 has 7 endpoint descriptors, different from the interface descriptor's value: 105 [ 236.472261][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 236.483107][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 236.493889][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 236.504958][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 236.515780][ T12] usb 4-1: config 6 interface 121 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 236.526587][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 236.537418][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 236.548388][ T12] usb 4-1: config 6 interface 121 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 236.559365][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 236.570104][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 236.580823][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 236.591618][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 236.602440][ T12] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x83, skipping [ 236.613085][ T2594] usb 5-1: not running at top speed; connect to a high speed hub [ 236.613557][ T12] usb 4-1: config 6 interface 61 has no altsetting 0 [ 236.627669][ T12] usb 4-1: config 6 interface 201 has no altsetting 0 [ 236.634496][ T12] usb 4-1: config 6 interface 44 has no altsetting 0 [ 236.641159][ T12] usb 4-1: config 6 interface 106 has no altsetting 0 [ 236.647985][ T12] usb 4-1: config 6 interface 121 has no altsetting 0 [ 236.702923][ T2594] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 236.713724][ T2594] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.844059][ T12] usb 4-1: New USB device found, idVendor=0930, idProduct=0708, bcdDevice=af.a2 [ 236.853277][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.861314][ T12] usb 4-1: Product: ꔲљ嗉藰뮫㽓舍䱋橧︇푋狷⪔ଡ틷覮鐉꩛抢⅝䵦﫼ꈎᚒㅷ䨅⊫㓽㦣㥝쎞缀⫞꼦뵗❑┗깜璄垆旪 [ 236.873080][ T2594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.879329][ T12] usb 4-1: Manufacturer: ю [ 236.891415][ T12] usb 4-1: SerialNumber: ࠔ [ 236.893366][ T2594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.911852][ T2594] usb 5-1: Product: ␁ [ 236.918183][ T2594] usb 5-1: Manufacturer: ᝂ熇㌵녺ꄄꭒ셩촯럒ᦕ냘淋葘뫴亦냻李延쨶툮൘䬮ꋡ輔蟑臻び溰ꊬ叕࡫刡敌㽡ࡊ賤뷧֧羑䣓᥽ᙳ啥ﲞྖЛ㌇ꢱꩈ矫쥩⹨輏壧鈴䝍禾믿ｲ袲톲떘ꎫ⥯粌ᴣ⽙炼⼆멣㈋휤篵厂㬴꛰榈뽨젨ⲹ컬酌㑭ꁦ뙿昢邇椢额䶯촖⧀䭄 [ 236.930292][ T8831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 236.957063][ T2594] usb 5-1: SerialNumber: ࠠ 19:28:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:09 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 237.062799][ T2594] usb 5-1: can't set config #1, error -71 [ 237.086991][ T2594] usb 5-1: USB disconnect, device number 3 19:28:09 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) syz_usb_connect(0x2, 0xba2, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x1a, 0x63, 0x57, 0x8, 0x930, 0x708, 0xafa2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb90, 0x4, 0x6, 0x1f, 0x40, 0x1f, [{{0x9, 0x4, 0x3d, 0x1, 0x7, 0x1, 0x3a, 0xd7, 0x29, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x9, "85a632"}, @as_header={0x7, 0x24, 0x1, 0xe4, 0x3e, 0x2}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x7, 0xd6, 0x40, [@generic={0x4e, 0x5, "5fdc4982839e88032a0afc0e9f4851e45733008975b7f919581bf7e50a8ff26ecf6537101e0d81902e99c7a1be1ec4706e175c448a1326896e06a1908a63a2e84f137bad1a1d0d28a7f9ed4a"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x20, 0x1, [@generic={0x84, 0xa, "e7bfe3e72b38947e8dc670ba7b6e3c8d8f72a6833a323c3fe7f51683f70d81a36c52cd529e73b456a70f69b1cd515d005ea029fbda8c1543bdb8adba009b451015c2363ef00b986b9733de299c509b7beda00ae1520a8b549ee0920a6ac9a25050be2c55f7c219aad6e4e5b476486133dc911046e76ead4869790903df8504d7f18b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0x2, 0x35}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xde, 0x5}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x1, 0x40, 0x2, [@generic={0x5, 0x10, "1839d6"}, @generic={0xc, 0xd, "33dcf4b8abc2aefa5d82"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x1f, 0x1, 0x7}}, {{0x9, 0x5, 0x80, 0x9, 0x10, 0x2, 0x5, 0x0, [@generic={0xd6, 0x1, "65d41dda9b48543770bca50cd10ae4c91467a0e3d5f6c10db66daa2bd0516403c942d2aa510a4ee2343dd87b3d5f503c41f89db550ea9c4c695da534104f322f807c0eae21cda2b59e983c97015c9bb952b050a317121670aa19284a044b9687c29219df234bc739080c67654da3110712db8d0427577cb7fb3f409035c169f43363bccfde4e3296cdf2f3423e13fb5aa031659860631dbbedffa2ae8d06349eef633895e3264bc41ee3d3cd08df13ea519af44d56c5418e6fd671861a955b4c93d0277ece4fb15af666c995f506b1f624ccdc0a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7, 0x7, 0xff, 0x3, 0x3a, 0x8, [@generic={0x61, 0x78, "6d7968c28133cc8b7608e4c85be8cb2a5c3fb4a604c35a18c027b2f332c635f241d6556236b1473640130f1db084436df0611f1118732ee413a8f7831b6b95ee50ccd73d564ab0b0bf65ed13c18ae6d850721d61e2f390feb0ab327f9f0627"}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x80, 0x7f, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0xfff8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x5ef, 0x7, 0x6, 0x1, [@generic={0xee, 0x22, "737b19dee6a11bdde62572a21ea37170f5916e15929964d275b2a1e37a25962a54c2995052e9785c53defc0cc514c432c35976496c8c1b7f77eb8b345a1c339f0fb57b55ff2e379b5e41487b381725b4e46b7b9e0182b62215f034964e7b78dd22adcc9b81c7a1a788ceaf8478ad92a953e7df658221a5a98e1e87006109947546e73feafd8fc758a5152b1cd1e75c507e526370c3a932de7290b7f888d34b658ed29985a9b5b9dc6529086758b3f70de78f0011ad2c28b206bcdccf8c780b7c4542c09a361b40e41e63d3bd33afbaefcb7486a6d3bfd10c812549171a10a30d1b0c18b0ded54b0ced6b94b0"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9e, 0x80, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3f, 0xbd, 0x1f, [@generic={0x3d, 0x15, "88bb87a70d1c312bd3e5298f575d615ce4f77a010296d06024c943f7e5bf9b0c31cbce80f96787d6758df632afd9b827bda10acf7176d9621f4a8a"}]}}, {{0x9, 0x5, 0xb, 0x7, 0x200, 0x0, 0x6, 0x2, [@generic={0x3d, 0x24, "7d09eb65e3cc6ed1176e20b3f8742e35f6719786b7f3b3481f3b48d7da69095a1aef3437bbe0bac6ab5ee92d1a3d042d2b80ad8727b9958606c1ad"}]}}]}}, {{0x9, 0x4, 0x2c, 0x6, 0xf, 0x60, 0x8a, 0xa6, 0x7, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x1, 0x80, 0x1, [@generic={0x26, 0x23, "1c9cd87597d647794ee2960050c0d2a8210ea3612ff501d691dc464df4ee68d675aee516"}, @generic={0x6b, 0x1, "844225c8604fc0b355b47b861f96dc414d373987d4bbf428cb3c23621b60636f436ad8d295798299dbe67ca197521747de332b7c0d16840eed7b4d95e84f771d15c4e2345165ba67f4f1aed6f8fa07c8d9a81cfaade414adf1725b3667e866daafff902c355112d1e3"}]}}, {{0x9, 0x5, 0x80, 0xd, 0x400, 0x0, 0x63, 0xdd, [@generic={0x2c, 0x24, "b0ce6dd7219ee50e31a761caf7f3f99f07535ae68ba1082c0ac5b17676bd23f5ff1f25d8d4cc3773db10"}, @generic={0xcb, 0x30, "b55eddc0f3405c010662a7a8a7c3b92aba7726883988e4375a40e6eb5b6e89f63b5bce76fc19b9125320c5ff23be7bbd41e9b7398e401190d3852fc8d51a513578467154aa3eeab6ca2c147b0ae5eafc635921f5f2fc35c0eb52df4f5666a464dd3fcafecf496d420485b3e52c9de4c08312d1540ed02eb3cbf9b62992f4ce3a9fe380db46d15f1d2fd1f7146c31a3b897bbd052762b21bbbb369f9b54fe8e8d613ace8f69075cf2881a488cd3e6b2b462ce9900a354743d032a5c2c2ae5b62b4684267b7de6192faf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x4}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x2, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x90e}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0x3f, 0x80}}, {{0x9, 0x5, 0x0, 0x2, 0x210, 0x2, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xca, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x6b, 0xf7, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x7d, 0x20, 0xff, [@generic={0xbc, 0x4, "6a9469304167ba64f446121b084e1643d4d8ac49ef72fe212ef1d5c991099421a8ec70b312de578c2ffd9ad552642ffe9758349fbf436a7f697c71dfe02cb1e0327ff0225104eb84cb74dacef6d715537c8ae0975c1e48aa684c2b1322df19ca17c96c5267b0735c50973b72e901426f62955bc14ba3e6b12a571bce6b325b005d40bb64db5820fdce2cf35d1da64fb506487d9b3c833ca91586e7c156340746149142af22e5ae951b4d15eb3c3479b344af15a60ba257eab55f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x81, 0x90, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x94, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0xfd, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xfb75}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x1f, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x5, 0xd3, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xbf, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x4b, 0xff, [@generic={0xda, 0x22, "832bcec171ac35ee43e76549ae69e31f164faa794813d15f757357f1b576596fd67fdb1369130dce49785bbf89fbfe08412197108490de2dbce2b075f92b0ecde944f47ea23aabcfdf83d4e19861785237691442ee21bf3fab39fba198ac0a0c1d7e659dd44fcd4f2eef35627bf62892f3d968450e9de134bba38caf7565c63ec93cbc249705c9c86fad3a1100ae605e7bc3e7fedf9de699c14402d027c567048f872bf5815f19eb6556472ef4092266724fd22d4d86fd47dfde09d7f73b9a30e216acddefc0018eb64d483676f3bec42bb8a04a8c168e51"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x79, 0x1, 0xd, 0x79, 0x40, 0x8a, 0x20, [@generic={0x78, 0x9, "50a147afa041c0760e4c69a65109fc6746ea32da9a4faeb485aea0ad1fb49cf38e94310b8d2cc8f951cf11a6561ac6e58a38ed38375631cc15d7c93bc73c7ef43c190a1d78ebce392ded0178c881d85c41a49607cddf3fb283df59e0ff6653c3ec7d02535559a531e3bed69532029e296d63346ec975"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "17dc"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5b5d, 0x3, 0xfff8, 0x1}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x1f, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x2, 0x9, [@generic={0x82, 0x11, "083c9aff5da2642d5d8d302eb8ec23c24dec9467d97dadb8074cf929a1bf165d8a52fddd41ee4e8b8b58d45cb38530163983ae6f66ceaa955f95bf0c9b234f679823be82e7bd6dd172650b1742be058ea779bfced62e1372644f93925ff58c4ad14537b263637e7c43c767b977d509d5cc942f2269afdac04baca61eb250cbf6"}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x0, 0x4, 0x58, 0x9}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x0, 0x20, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x58, 0x28, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbb, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2, 0x220, 0x40, 0x2f, 0x0, [@generic={0x56, 0x21, "bfcc87cce5e5598c6ec017360999b1b2a0fadd0c6092f8ef20a35b31c84fe1240c89760b66b80298b8965c3ac09438a132b173b066282cd6f9a0a318080127754b9643a27b8c1000e4bcb3f391518ceb1aa4c54b"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x3, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x5, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xc59d}, @generic={0x90, 0x2d, "eab473a472f91ddde5e366bba0048f86db7faa952c84ae51f25577b761527400cb8d313daece44b2084a36a560797cc08fb4a0f4843e624733110ab1db56a721875173cfc67b3b93f3fb48b1f09a5f816ca8b65980dea59167bea332ff19caafa212ad172b46271422c6ec66c7b828f8de28e16cf31acc5c43c5ef13cb2e861f3367e6d18211f8b4b5db1e9ee459"}]}}, {{0x9, 0x5, 0xd, 0x300a70409fb3c550, 0x200, 0x40, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xf7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8a, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x240, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x5, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x100}]}}, {{0x9, 0x5, 0x83, 0x10, 0x200, 0x5, 0x0, 0x0, [@generic={0x9f, 0x6, "6620f8222de0afd573198d7485e74c472ec5e9f4686969d3662f3a2c2adcaeaea5c3a81a68503c4ea8c24a5b69e319d3fe450a6ce6d0e09cd2b7793daf4890c523880de743730bf7558691608239b26d4858fd57bfdfe1298147bc3e0e88bd2cf211524ebfa8d6076b6a5536081f59e97ce2465a9ff1225cc2343a62886345188c6d40b42e03079276477f32a5018ae8c05735803b7102ced8c5915679"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x81, 0xe0, 0x80, 0x40, 0x80}, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="070711"], 0x6, [{0x1a, &(0x7f0000000200)=@string={0x1a, 0x3, "20f1edd8d8274a9e3b3b6fe960983a73ff993103d4093657"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}, {0x61, &(0x7f00000003c0)=@string={0x61, 0x3, "32a55904c955d2d8f085abbb533f0d824b4c676a07fe4bd4f772942a41e8210bf7d2ae890994b1df5baaa2625d21664dfcfa0ea2921688ee7731054aab22fd341bf5a3395d399ec3007fde2a26af57bd512717255cae84748657ea6586e143"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1c0a}}]}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f00000004c0)={{0x5, 0x8}, 'port1\x00', 0x71, 0x2042c, 0x6, 0x6, 0x0, 0x80000001}) unshare(0x40000100) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380)='/dev/snd/seq\x00', 0x0) pidfd_getfd(r2, r3, 0x0) setreuid(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer2\x00', 0x480000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000001580)={0x9b6, 0x3, 0x1, 'queue1\x00', 0x7f}) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 19:28:09 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:10 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) [ 237.301220][ T26] audit: type=1800 audit(1602185290.003:13): pid=8920 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 237.427293][ T12] usb 4-1: USB disconnect, device number 2 [ 237.440584][ T26] audit: type=1800 audit(1602185290.143:14): pid=8936 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:10 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:10 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 237.744461][ T26] audit: type=1800 audit(1602185290.453:15): pid=8955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 238.322574][ T2594] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 238.723047][ T2594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.773124][ T2594] usb 4-1: not running at top speed; connect to a high speed hub [ 238.895976][ T2594] usb 4-1: config 6 has an invalid interface number: 61 but max is 3 [ 238.909241][ T2594] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 238.920556][ T2594] usb 4-1: config 6 has an invalid interface number: 201 but max is 3 [ 238.929958][ T2594] usb 4-1: config 6 has an invalid interface number: 44 but max is 3 [ 238.939040][ T2594] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 238.948718][ T2594] usb 4-1: config 6 has an invalid interface number: 106 but max is 3 [ 238.957240][ T2594] usb 4-1: config 6 has an invalid interface number: 121 but max is 3 [ 238.966628][ T2594] usb 4-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 238.975943][ T2594] usb 4-1: config 6 has no interface number 0 [ 238.982146][ T2594] usb 4-1: config 6 has no interface number 1 [ 238.988613][ T2594] usb 4-1: config 6 has no interface number 2 [ 238.994998][ T2594] usb 4-1: config 6 has no interface number 3 [ 239.001101][ T2594] usb 4-1: config 6 has no interface number 4 [ 239.007576][ T2594] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x5F, skipping [ 239.018314][ T2594] usb 4-1: config 6 interface 61 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 239.029351][ T2594] usb 4-1: config 6 interface 61 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 239.040347][ T2594] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 239.051040][ T2594] usb 4-1: config 6 interface 61 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 239.062638][ T2594] usb 4-1: config 6 interface 61 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 239.075650][ T2594] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 239.086960][ T2594] usb 4-1: config 6 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 239.101023][ T2594] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0x1 has invalid maxpacket 1519, setting to 64 [ 239.117225][ T2594] usb 4-1: config 6 interface 201 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 239.128204][ T2594] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 239.144884][ T2594] usb 4-1: config 6 interface 201 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 239.160085][ T2594] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 239.172116][ T2594] usb 4-1: config 6 interface 201 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 239.183103][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 239.193790][ T2594] usb 4-1: config 6 interface 44 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 239.204705][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 239.215348][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 239.225919][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 239.236593][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 239.247271][ T2594] usb 4-1: config 6 interface 44 altsetting 6 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 239.260364][ T2594] usb 4-1: too many endpoints for config 6 interface 106 altsetting 148: 105, using maximum allowed: 30 [ 239.272429][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0xE, skipping [ 239.283487][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0xE, skipping [ 239.294395][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has an invalid endpoint with address 0x80, skipping [ 239.305320][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x4, skipping [ 239.316232][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x9, skipping [ 239.327184][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has a duplicate endpoint with address 0x3, skipping [ 239.338123][ T2594] usb 4-1: config 6 interface 106 altsetting 148 has 7 endpoint descriptors, different from the interface descriptor's value: 105 [ 239.351565][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 239.362332][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 239.374102][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 239.384881][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 239.395797][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 239.406469][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 239.417185][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 239.427937][ T2594] usb 4-1: config 6 interface 121 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 239.438926][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 239.449697][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 239.460476][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 239.472084][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 239.483003][ T2594] usb 4-1: config 6 interface 121 altsetting 1 has a duplicate endpoint with address 0x83, skipping [ 239.493820][ T2594] usb 4-1: config 6 interface 61 has no altsetting 0 [ 239.500490][ T2594] usb 4-1: config 6 interface 201 has no altsetting 0 [ 239.507324][ T2594] usb 4-1: config 6 interface 44 has no altsetting 0 [ 239.514045][ T2594] usb 4-1: config 6 interface 106 has no altsetting 0 [ 239.520812][ T2594] usb 4-1: config 6 interface 121 has no altsetting 0 [ 239.682456][ T2594] usb 4-1: New USB device found, idVendor=0930, idProduct=0708, bcdDevice=af.a2 [ 239.691572][ T2594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.705156][ T2594] usb 4-1: Product: ꔲљ嗉藰뮫㽓舍䱋橧︇푋狷⪔ଡ틷覮鐉꩛抢⅝䵦﫼ꈎᚒㅷ䨅⊫㓽㦣㥝쎞缀⫞꼦뵗❑┗깜璄垆旪 [ 239.727802][ T2594] usb 4-1: Manufacturer: ю [ 239.732461][ T2594] usb 4-1: SerialNumber: ࠔ [ 239.755717][ T8927] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 240.234437][ T2594] usb 4-1: USB disconnect, device number 3 19:28:13 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) 19:28:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:13 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:13 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 240.654372][ T26] audit: type=1800 audit(1602185293.363:16): pid=9022 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:13 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) 19:28:13 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:13 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) 19:28:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 241.099049][ T26] audit: type=1800 audit(1602185293.803:17): pid=9039 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:13 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) 19:28:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) [ 241.458441][ T26] audit: type=1800 audit(1602185294.164:18): pid=9061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:14 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r4, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) [ 241.704483][ T26] audit: type=1800 audit(1602185294.414:19): pid=9074 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:14 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:14 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:14 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:14 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 242.124669][ T26] audit: type=1800 audit(1602185294.834:20): pid=9090 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 242.374187][ T26] audit: type=1800 audit(1602185295.084:21): pid=9103 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:15 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:15 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 242.792316][ T26] audit: type=1800 audit(1602185295.504:22): pid=9117 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:15 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:15 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 243.064790][ T26] audit: type=1800 audit(1602185295.774:23): pid=9130 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:15 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:15 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:16 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:16 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:16 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:16 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:16 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:17 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 244.243994][ T26] audit: type=1800 audit(1602185296.954:24): pid=9183 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:17 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:17 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 244.554603][ T26] audit: type=1800 audit(1602185297.264:25): pid=9199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:17 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:17 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 244.821829][ T26] audit: type=1800 audit(1602185297.534:26): pid=9209 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:17 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 245.135919][ T26] audit: type=1800 audit(1602185297.844:27): pid=9223 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) socket(0x1e, 0x1, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 245.437040][ T26] audit: type=1800 audit(1602185298.144:28): pid=9234 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:18 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:18 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 245.681775][ T26] audit: type=1800 audit(1602185298.394:29): pid=9248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:18 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 245.992447][ T26] audit: type=1800 audit(1602185298.705:30): pid=9261 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:18 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:18 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:19 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:19 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:19 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:19 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:20 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 3: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:20 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:21 executing program 3: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:21 executing program 3: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:21 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 5: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:21 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:21 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 249.018681][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 249.018693][ T26] audit: type=1800 audit(1602185301.725:34): pid=9423 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:21 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:22 executing program 5: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:22 executing program 5: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:22 executing program 5: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:22 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:23 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:23 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:23 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:23 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:23 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:23 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:23 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:24 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:24 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:24 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:24 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:24 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:24 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:24 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:24 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:25 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:25 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:25 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:25 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:25 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:26 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:26 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:26 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(0x0, 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(0x0, 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:26 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:26 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(0x0, 0x65142, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:27 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:27 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:27 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:27 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:27 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:27 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:28:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:28 executing program 0: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:28 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:28 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) 19:28:28 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1f}, 0x14) openat$full(0xffffffffffffff9c, 0x0, 0x428281, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000600)='./bus\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x6c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x8, 0x0, 0x17}, 0x2c) signalfd(r0, &(0x7f0000000140)={[0x9]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)) 19:28:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 256.087504][ T26] audit: type=1800 audit(1602185308.797:35): pid=9842 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) [ 256.252362][ T26] audit: type=1800 audit(1602185308.967:36): pid=9853 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 256.374671][ T26] audit: type=1800 audit(1602185308.997:37): pid=9852 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 errno=0 19:28:29 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:29 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) [ 256.498034][ T26] audit: type=1800 audit(1602185309.177:38): pid=9865 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 3: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x0, 0x367, 0xfffffffc, 0x5, 0x1f, 0x5, 0x3d, 0x5, 0x40, 0x4, 0x615a, 0x3, 0x2f, 0x7, 0xa2d, 0x3, 0xb, 0x9, 0xebaeac8, 0x8efa, 0xc5b2, 0xffff8001, 0xa87, 0x5, 0x3, 0x40400, 0x80000000, 0x1, 0x10002, 0x1f, 0x5, 0x20]}) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x206843, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000080", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf257b71000035d3db594dbe1ba6993500060008021100000100000a000600ffffffffffff00000a00060008021100000100007a5702f6ba573c069e7e0a000600080211000000e5ff0a0006"], 0x64}, 0x1, 0x0, 0x0, 0x40140d0}, 0x4800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 19:28:29 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) [ 256.687930][ T26] audit: type=1800 audit(1602185309.397:39): pid=9877 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, 0x0, 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 256.909164][ T26] audit: type=1800 audit(1602185309.627:40): pid=9892 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 257.111292][ T26] audit: type=1800 audit(1602185309.827:41): pid=9901 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:30 executing program 3 (fault-call:4 fault-nth:0): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:30 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 257.600214][ T9922] FAULT_INJECTION: forcing a failure. [ 257.600214][ T9922] name failslab, interval 1, probability 0, space 0, times 1 [ 257.621030][ T26] audit: type=1800 audit(1602185310.337:42): pid=9918 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 257.700474][ T9922] CPU: 1 PID: 9922 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 257.709069][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.719116][ T9922] Call Trace: [ 257.722475][ T9922] dump_stack+0x198/0x1fd [ 257.726850][ T9922] should_fail.cold+0x5/0x14 [ 257.731443][ T9922] ? rw_copy_check_uvector+0x311/0x390 [ 257.736898][ T9922] should_failslab+0x5/0xf [ 257.741330][ T9922] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 257.747401][ T9922] __kmalloc+0x6f/0x360 [ 257.751574][ T9922] rw_copy_check_uvector+0x311/0x390 [ 257.756926][ T9922] import_iovec+0xa6/0x3d0 [ 257.761344][ T9922] ? compat_import_iovec+0x3d0/0x3d0 [ 257.766628][ T9922] ? find_held_lock+0x2d/0x110 [ 257.771398][ T9922] vfs_readv+0xbb/0x150 [ 257.775557][ T9922] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 257.781627][ T9922] ? __fget_files+0x272/0x400 [ 257.786303][ T9922] ? lock_downgrade+0x830/0x830 [ 257.791153][ T9922] ? lock_downgrade+0x830/0x830 [ 257.796017][ T9922] ? __fget_files+0x294/0x400 [ 257.800710][ T9922] __x64_sys_preadv+0x231/0x310 [ 257.805563][ T9922] ? __ia32_sys_writev+0xb0/0xb0 [ 257.810567][ T9922] ? check_preemption_disabled+0x50/0x130 [ 257.816290][ T9922] ? syscall_enter_from_user_mode+0x1d/0x60 [ 257.822187][ T9922] do_syscall_64+0x2d/0x70 [ 257.826638][ T9922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 257.832526][ T9922] RIP: 0033:0x45de29 [ 257.836432][ T9922] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.856042][ T9922] RSP: 002b:00007f912a945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 257.864453][ T9922] RAX: ffffffffffffffda RBX: 0000000000025dc0 RCX: 000000000045de29 [ 257.872422][ T9922] RDX: 00000000000003da RSI: 00000000200017c0 RDI: 0000000000000004 [ 257.880392][ T9922] RBP: 00007f912a945ca0 R08: 0000000000000000 R09: 0000000000000000 [ 257.888362][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 19:28:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:30 executing program 5 (fault-call:4 fault-nth:0): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0), 0x0, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 257.896325][ T9922] R13: 000000000169fb7f R14: 00007f912a9469c0 R15: 000000000118bf2c 19:28:30 executing program 3 (fault-call:4 fault-nth:1): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 257.986203][ T26] audit: type=1800 audit(1602185310.697:43): pid=9929 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 258.005349][ T9931] FAULT_INJECTION: forcing a failure. [ 258.005349][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 258.062992][ T9931] CPU: 1 PID: 9931 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 258.071590][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.081653][ T9931] Call Trace: [ 258.084943][ T9931] dump_stack+0x198/0x1fd [ 258.089280][ T9931] should_fail.cold+0x5/0x14 [ 258.093879][ T9931] ? rw_copy_check_uvector+0x311/0x390 [ 258.099337][ T9931] should_failslab+0x5/0xf [ 258.103755][ T9931] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 258.109828][ T9931] __kmalloc+0x6f/0x360 [ 258.114000][ T9931] rw_copy_check_uvector+0x311/0x390 [ 258.119298][ T9931] import_iovec+0xa6/0x3d0 [ 258.123720][ T9931] ? compat_import_iovec+0x3d0/0x3d0 [ 258.129127][ T9931] ? find_held_lock+0x2d/0x110 [ 258.133899][ T9931] vfs_readv+0xbb/0x150 [ 258.138139][ T9931] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 258.144234][ T9931] ? __fget_files+0x272/0x400 [ 258.148917][ T9931] ? lock_downgrade+0x830/0x830 [ 258.153770][ T9931] ? lock_downgrade+0x830/0x830 [ 258.158628][ T9931] ? __fget_files+0x294/0x400 [ 258.163333][ T9931] __x64_sys_preadv+0x231/0x310 [ 258.168288][ T9931] ? __ia32_sys_writev+0xb0/0xb0 [ 258.173307][ T9931] ? check_preemption_disabled+0x50/0x130 [ 258.179028][ T9931] ? syscall_enter_from_user_mode+0x1d/0x60 [ 258.184924][ T9931] do_syscall_64+0x2d/0x70 [ 258.189342][ T9931] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.195226][ T9931] RIP: 0033:0x45de29 [ 258.199116][ T9931] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.218726][ T9931] RSP: 002b:00007fb23d60dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 258.227136][ T9931] RAX: ffffffffffffffda RBX: 0000000000025dc0 RCX: 000000000045de29 [ 258.235106][ T9931] RDX: 00000000000003da RSI: 00000000200017c0 RDI: 0000000000000004 [ 258.243073][ T9931] RBP: 00007fb23d60dca0 R08: 0000000000000000 R09: 0000000000000000 [ 258.251157][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 19:28:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 258.259251][ T9931] R13: 000000000169fb7f R14: 00007fb23d60e9c0 R15: 000000000118bf2c [ 258.280296][ T9942] FAULT_INJECTION: forcing a failure. [ 258.280296][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 258.293727][ T9942] CPU: 1 PID: 9942 Comm: syz-executor.3 Not tainted 5.9.0-rc8-syzkaller #0 [ 258.302312][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.312359][ T9942] Call Trace: [ 258.315665][ T9942] dump_stack+0x198/0x1fd [ 258.320012][ T9942] should_fail.cold+0x5/0x14 [ 258.324607][ T9942] should_failslab+0x5/0xf [ 258.329026][ T9942] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 258.335097][ T9942] kmem_cache_alloc_node_trace+0x55/0x430 [ 258.340824][ T9942] ? lock_downgrade+0x830/0x830 [ 258.345684][ T9942] __kmalloc_node+0x38/0x60 [ 258.350195][ T9942] kvmalloc_node+0x61/0xf0 [ 258.354625][ T9942] seq_read+0x743/0x1070 [ 258.358881][ T9942] ? seq_hex_dump+0x440/0x440 [ 258.363561][ T9942] proc_reg_read+0x221/0x300 [ 258.368153][ T9942] do_iter_read+0x48e/0x6e0 [ 258.372672][ T9942] vfs_readv+0xe5/0x150 [ 258.376835][ T9942] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 258.382906][ T9942] ? __fget_files+0x272/0x400 [ 258.387600][ T9942] ? lock_downgrade+0x830/0x830 [ 258.392471][ T9942] ? __fget_files+0x294/0x400 [ 258.397171][ T9942] __x64_sys_preadv+0x231/0x310 [ 258.402047][ T9942] ? __ia32_sys_writev+0xb0/0xb0 [ 258.407022][ T9942] ? check_preemption_disabled+0x50/0x130 [ 258.412756][ T9942] ? syscall_enter_from_user_mode+0x1d/0x60 [ 258.418655][ T9942] do_syscall_64+0x2d/0x70 [ 258.423075][ T9942] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 258.428966][ T9942] RIP: 0033:0x45de29 [ 258.432862][ T9942] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.452466][ T9942] RSP: 002b:00007f912a945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 19:28:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 258.460878][ T9942] RAX: ffffffffffffffda RBX: 0000000000025dc0 RCX: 000000000045de29 [ 258.468848][ T9942] RDX: 00000000000003da RSI: 00000000200017c0 RDI: 0000000000000004 [ 258.476813][ T9942] RBP: 00007f912a945ca0 R08: 0000000000000000 R09: 0000000000000000 [ 258.484781][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.492761][ T9942] R13: 000000000169fb7f R14: 00007f912a9469c0 R15: 000000000118bf2c [ 258.540498][ T26] audit: type=1800 audit(1602185311.257:44): pid=9947 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:31 executing program 3 (fault-call:4 fault-nth:2): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:31 executing program 5 (fault-call:4 fault-nth:1): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 258.912932][ T9961] FAULT_INJECTION: forcing a failure. [ 258.912932][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 258.976563][ T9961] CPU: 1 PID: 9961 Comm: syz-executor.5 Not tainted 5.9.0-rc8-syzkaller #0 [ 258.985161][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.995211][ T9961] Call Trace: [ 258.998502][ T9961] dump_stack+0x198/0x1fd [ 259.002836][ T9961] should_fail.cold+0x5/0x14 [ 259.007436][ T9961] should_failslab+0x5/0xf [ 259.011854][ T9961] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 259.017923][ T9961] kmem_cache_alloc_node_trace+0x55/0x430 19:28:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 259.023640][ T9961] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 259.029818][ T9961] __kmalloc_node+0x38/0x60 [ 259.034322][ T9961] kvmalloc_node+0x61/0xf0 [ 259.038738][ T9961] seq_read+0x743/0x1070 [ 259.042992][ T9961] ? seq_hex_dump+0x440/0x440 [ 259.047687][ T9961] proc_reg_read+0x221/0x300 [ 259.052287][ T9961] do_iter_read+0x48e/0x6e0 [ 259.056806][ T9961] vfs_readv+0xe5/0x150 [ 259.060974][ T9961] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 259.067092][ T9961] ? __fget_files+0x272/0x400 [ 259.071790][ T9961] ? native_apic_msr_write+0x54/0x80 19:28:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{0x0}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 259.077079][ T9961] ? __fget_files+0x294/0x400 [ 259.081771][ T9961] __x64_sys_preadv+0x231/0x310 [ 259.086626][ T9961] ? __ia32_sys_writev+0xb0/0xb0 [ 259.091588][ T9961] ? check_preemption_disabled+0x50/0x130 [ 259.097307][ T9961] ? syscall_enter_from_user_mode+0x1d/0x60 [ 259.103203][ T9961] do_syscall_64+0x2d/0x70 [ 259.107627][ T9961] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 259.113519][ T9961] RIP: 0033:0x45de29 19:28:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 259.117418][ T9961] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.137012][ T9961] RSP: 002b:00007fb23d60dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 259.145421][ T9961] RAX: ffffffffffffffda RBX: 0000000000025dc0 RCX: 000000000045de29 [ 259.153393][ T9961] RDX: 00000000000003da RSI: 00000000200017c0 RDI: 0000000000000004 [ 259.161449][ T9961] RBP: 00007fb23d60dca0 R08: 0000000000000000 R09: 0000000000000000 [ 259.169417][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.177393][ T9961] R13: 000000000169fb7f R14: 00007fb23d60e9c0 R15: 000000000118bf2c 19:28:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 19:28:32 executing program 5 (fault-call:4 fault-nth:2): openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) 19:28:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:32 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) 19:28:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:32 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:33 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:33 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) 19:28:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x4, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:33 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) 19:28:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, 0x0, 0x0) 19:28:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:33 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 261.230047][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 261.230060][ T26] audit: type=1800 audit(1602185313.938:51): pid=10054 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:34 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) 19:28:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, 0x0, 0x0) 19:28:34 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x6, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 261.442285][ T26] audit: type=1800 audit(1602185314.158:52): pid=10073 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:34 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, 0x0, 0x0) 19:28:34 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:34 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x7, 0x0, 0x0) [ 262.117838][ T26] audit: type=1800 audit(1602185314.818:53): pid=10095 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r2, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200), 0x0) 19:28:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:34 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) 19:28:34 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x8, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:35 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 262.344935][ T26] audit: type=1800 audit(1602185315.048:54): pid=10117 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:35 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x9, 0x0, 0x0) 19:28:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200), 0x0) 19:28:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r5, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:35 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xa, 0x0, 0x0) [ 262.580417][ T26] audit: type=1800 audit(1602185315.288:55): pid=10131 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:35 executing program 2 (fault-call:7 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200), 0x0) 19:28:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:35 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) 19:28:35 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xb, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 263.181445][ T26] audit: type=1800 audit(1602185315.888:56): pid=10158 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:35 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) 19:28:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xc, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 263.253710][T10165] FAULT_INJECTION: forcing a failure. [ 263.253710][T10165] name failslab, interval 1, probability 0, space 0, times 0 [ 263.365963][T10165] CPU: 0 PID: 10165 Comm: syz-executor.2 Not tainted 5.9.0-rc8-syzkaller #0 [ 263.374660][T10165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.384707][T10165] Call Trace: [ 263.387998][T10165] dump_stack+0x198/0x1fd [ 263.392338][T10165] should_fail.cold+0x5/0x14 [ 263.396936][T10165] ? do_sys_poll+0x270/0xd40 [ 263.401531][T10165] should_failslab+0x5/0xf [ 263.405951][T10165] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 263.412022][T10165] __kmalloc+0x6f/0x360 [ 263.416283][T10165] ? __might_fault+0x190/0x1d0 [ 263.421056][T10165] do_sys_poll+0x270/0xd40 [ 263.425485][T10165] ? is_bpf_text_address+0xcb/0x160 [ 263.430684][T10165] ? compat_core_sys_select+0x7c0/0x7c0 [ 263.436226][T10165] ? mark_lock+0x82/0x1660 [ 263.440670][T10165] ? mark_lock+0x82/0x1660 [ 263.445211][T10165] ? __lock_acquire+0xb92/0x5780 [ 263.450156][T10165] ? lock_downgrade+0x830/0x830 [ 263.455026][T10165] ? _parse_integer+0x132/0x180 [ 263.460016][T10165] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 263.466001][T10165] ? _kstrtoull+0x186/0x420 [ 263.470513][T10165] ? lock_is_held_type+0xbb/0xf0 [ 263.475454][T10165] ? find_held_lock+0x2d/0x110 [ 263.480220][T10165] ? lock_is_held_type+0xbb/0xf0 [ 263.485158][T10165] ? find_held_lock+0x2d/0x110 [ 263.489965][T10165] ? ksys_write+0x212/0x250 [ 263.494471][T10165] ? lock_downgrade+0x830/0x830 [ 263.499325][T10165] ? vfs_write+0x397/0x730 [ 263.503769][T10165] ? lock_downgrade+0x830/0x830 [ 263.508616][T10165] ? get_pid_task+0x138/0x200 [ 263.513301][T10165] ? set_user_sigmask+0x211/0x2a0 [ 263.518322][T10165] ? __mutex_unlock_slowpath+0xe2/0x610 [ 263.523863][T10165] ? __set_current_blocked+0x110/0x110 [ 263.529318][T10165] ? wait_for_completion+0x260/0x260 [ 263.534607][T10165] __x64_sys_ppoll+0x210/0x280 [ 263.539369][T10165] ? fput_many+0x2f/0x1a0 [ 263.543695][T10165] ? __ia32_sys_poll+0x440/0x440 [ 263.548628][T10165] ? lock_is_held_type+0xbb/0xf0 [ 263.553571][T10165] ? syscall_enter_from_user_mode+0x1d/0x60 [ 263.559459][T10165] ? check_preemption_disabled+0x50/0x130 [ 263.565176][T10165] ? syscall_enter_from_user_mode+0x1d/0x60 [ 263.571090][T10165] do_syscall_64+0x2d/0x70 [ 263.575529][T10165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 263.581414][T10165] RIP: 0033:0x45de29 [ 263.585308][T10165] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.604907][T10165] RSP: 002b:00007f1508d6cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f 19:28:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 4 (fault-call:6 fault-nth:0): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 263.613313][T10165] RAX: ffffffffffffffda RBX: 0000000000025040 RCX: 000000000045de29 [ 263.621283][T10165] RDX: 0000000000000000 RSI: 20000000000000c3 RDI: 00000000200000c0 [ 263.629339][T10165] RBP: 00007f1508d6cca0 R08: ffffffffffffff34 R09: 0000000000000000 [ 263.637302][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.645269][T10165] R13: 000000000169fb7f R14: 00007f1508d6d9c0 R15: 000000000118bf2c 19:28:36 executing program 2 (fault-call:7 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) 19:28:36 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xd, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 263.740099][ T26] audit: type=1800 audit(1602185316.448:57): pid=10185 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 263.769037][T10185] FAULT_INJECTION: forcing a failure. [ 263.769037][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 263.851925][T10185] CPU: 1 PID: 10185 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 263.860612][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.870674][T10185] Call Trace: [ 263.873970][T10185] dump_stack+0x198/0x1fd [ 263.878309][T10185] should_fail.cold+0x5/0x14 [ 263.882909][T10185] should_failslab+0x5/0xf [ 263.887329][T10185] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 263.893403][T10185] kmem_cache_alloc_trace+0x49/0x300 [ 263.898689][T10185] ? ext4_journal_check_start+0x1ae/0x290 [ 263.904418][T10185] iomap_dio_rw+0x1ec/0x1230 [ 263.909022][T10185] ? generic_update_time+0x21c/0x370 [ 263.914314][T10185] ? iomap_dio_complete_work+0x80/0x80 [ 263.919776][T10185] ? __wait_on_freeing_inode+0x140/0x140 [ 263.925428][T10185] ? current_time+0x2c0/0x2c0 [ 263.930115][T10185] ? down_write_killable+0x170/0x170 [ 263.935413][T10185] ext4_file_write_iter+0xe28/0x13f0 [ 263.940714][T10185] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 263.946524][T10185] ? lockdep_hardirqs_on_prepare+0x530/0x530 19:28:36 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) 19:28:36 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xe, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 263.952507][T10185] ? lock_is_held_type+0xbb/0xf0 [ 263.957555][T10185] ? aa_path_link+0x2f0/0x2f0 [ 263.962250][T10185] new_sync_write+0x422/0x650 [ 263.966930][T10185] ? new_sync_read+0x6e0/0x6e0 [ 263.971701][T10185] ? lock_downgrade+0x830/0x830 [ 263.976560][T10185] ? lock_is_held_type+0xbb/0xf0 [ 263.981507][T10185] ? __sb_start_write+0x1c9/0x450 [ 263.986570][T10185] vfs_write+0x5ad/0x730 [ 263.990842][T10185] ksys_write+0x12d/0x250 [ 263.995174][T10185] ? __ia32_sys_read+0xb0/0xb0 19:28:36 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:36 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0xf, 0x0, 0x0) [ 263.999962][T10185] ? check_preemption_disabled+0x50/0x130 [ 264.005686][T10185] ? syscall_enter_from_user_mode+0x1d/0x60 [ 264.011581][T10185] do_syscall_64+0x2d/0x70 [ 264.015996][T10185] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.021880][T10185] RIP: 0033:0x45de29 [ 264.025769][T10185] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:28:36 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:36 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) [ 264.045363][T10185] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.053780][T10185] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 264.061748][T10185] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 264.069716][T10185] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 264.077693][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.085666][T10185] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:37 executing program 4 (fault-call:6 fault-nth:1): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x10, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) 19:28:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) 19:28:37 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 264.477696][ T26] audit: type=1800 audit(1602185317.188:58): pid=10234 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 264.504669][T10234] FAULT_INJECTION: forcing a failure. [ 264.504669][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 264.585301][T10234] CPU: 0 PID: 10234 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 264.593984][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.604037][T10234] Call Trace: [ 264.607332][T10234] dump_stack+0x198/0x1fd [ 264.611665][T10234] should_fail.cold+0x5/0x14 [ 264.616259][T10234] should_failslab+0x5/0xf [ 264.620676][T10234] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 264.626746][T10234] kmem_cache_alloc+0x46/0x3f0 [ 264.631534][T10234] ? mempool_alloc+0x350/0x350 [ 264.636292][T10234] mempool_alloc+0x146/0x350 [ 264.640889][T10234] ? __check_block_validity.constprop.0+0x1ac/0x2f0 [ 264.647476][T10234] ? remove_element+0x1d0/0x1d0 [ 264.652331][T10234] ? ext4_map_blocks+0x2df/0x1650 [ 264.657365][T10234] ? lock_is_held_type+0xbb/0xf0 [ 264.662308][T10234] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 264.667566][T10234] bio_alloc_bioset+0x37b/0x5d0 [ 264.672422][T10234] ? ext4_journal_check_start+0x1ae/0x290 [ 264.678150][T10234] ? bvec_alloc+0x2f0/0x2f0 [ 264.682647][T10234] ? __ext4_journal_stop+0x107/0x1f0 [ 264.687933][T10234] ? iov_iter_npages+0x1fd/0xa70 [ 264.692869][T10234] ? ext4_iomap_begin+0x19e/0x690 [ 264.697907][T10234] iomap_dio_bio_actor+0x518/0xf00 [ 264.703055][T10234] iomap_dio_actor+0x95/0x530 [ 264.707734][T10234] ? lock_is_held_type+0xbb/0xf0 [ 264.712679][T10234] iomap_apply+0x2b6/0xcc0 [ 264.717097][T10234] ? iomap_dio_rw+0x1230/0x1230 [ 264.721943][T10234] ? iomap_dio_rw+0x6c7/0x1230 [ 264.726710][T10234] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 264.733211][T10234] ? mark_lock+0x82/0x1660 [ 264.737645][T10234] ? lock_is_held_type+0xbb/0xf0 [ 264.742596][T10234] ? filemap_check_errors+0xa5/0x150 [ 264.747874][T10234] iomap_dio_rw+0x6c7/0x1230 [ 264.752446][T10234] ? iomap_dio_rw+0x1230/0x1230 [ 264.757289][T10234] ? iomap_dio_complete_work+0x80/0x80 [ 264.762744][T10234] ? __wait_on_freeing_inode+0x140/0x140 [ 264.768380][T10234] ? down_write_killable+0x170/0x170 [ 264.773653][T10234] ext4_file_write_iter+0xe28/0x13f0 [ 264.778928][T10234] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 264.784623][T10234] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 264.790583][T10234] ? lock_is_held_type+0xbb/0xf0 [ 264.795510][T10234] ? aa_path_link+0x2f0/0x2f0 [ 264.800174][T10234] new_sync_write+0x422/0x650 [ 264.804828][T10234] ? new_sync_read+0x6e0/0x6e0 [ 264.809567][T10234] ? lock_downgrade+0x830/0x830 [ 264.814417][T10234] ? lock_is_held_type+0xbb/0xf0 [ 264.819337][T10234] ? __sb_start_write+0x1c9/0x450 [ 264.824361][T10234] vfs_write+0x5ad/0x730 [ 264.828587][T10234] ksys_write+0x12d/0x250 [ 264.832893][T10234] ? __ia32_sys_read+0xb0/0xb0 [ 264.837636][T10234] ? check_preemption_disabled+0x50/0x130 [ 264.843328][T10234] ? syscall_enter_from_user_mode+0x1d/0x60 [ 264.849197][T10234] do_syscall_64+0x2d/0x70 [ 264.853588][T10234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 264.859453][T10234] RIP: 0033:0x45de29 [ 264.863328][T10234] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:28:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 264.882909][T10234] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.891297][T10234] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 264.899248][T10234] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 264.907197][T10234] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 264.915145][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.923112][T10234] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:37 executing program 4 (fault-call:6 fault-nth:2): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) 19:28:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:37 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x12, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:38 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) 19:28:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 265.227889][ T26] audit: type=1800 audit(1602185317.938:59): pid=10266 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 265.263961][T10266] FAULT_INJECTION: forcing a failure. [ 265.263961][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 265.308407][T10266] CPU: 1 PID: 10266 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 265.317081][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.327123][T10266] Call Trace: [ 265.330419][T10266] dump_stack+0x198/0x1fd [ 265.334760][T10266] should_fail.cold+0x5/0x14 [ 265.339358][T10266] should_failslab+0x5/0xf [ 265.344051][T10266] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 265.350228][T10266] kmem_cache_alloc+0x46/0x3f0 [ 265.355005][T10266] ? mempool_alloc+0x350/0x350 [ 265.359769][T10266] mempool_alloc+0x146/0x350 [ 265.364369][T10266] ? remove_element+0x1d0/0x1d0 [ 265.369224][T10266] ? __check_block_validity.constprop.0+0x1ac/0x2f0 [ 265.375946][T10266] ? remove_element+0x1d0/0x1d0 [ 265.380803][T10266] ? ext4_map_blocks+0x2df/0x1650 [ 265.385838][T10266] bvec_alloc+0xd8/0x2f0 [ 265.390089][T10266] bio_alloc_bioset+0x41d/0x5d0 [ 265.394950][T10266] ? bvec_alloc+0x2f0/0x2f0 [ 265.399453][T10266] ? __ext4_journal_stop+0x107/0x1f0 [ 265.404742][T10266] ? iov_iter_npages+0x1fd/0xa70 [ 265.409677][T10266] ? ext4_iomap_begin+0x19e/0x690 [ 265.414732][T10266] iomap_dio_bio_actor+0x518/0xf00 [ 265.419858][T10266] iomap_dio_actor+0x95/0x530 [ 265.424560][T10266] ? lock_is_held_type+0xbb/0xf0 [ 265.429496][T10266] iomap_apply+0x2b6/0xcc0 [ 265.433904][T10266] ? iomap_dio_rw+0x1230/0x1230 [ 265.438747][T10266] ? iomap_dio_rw+0x6c7/0x1230 [ 265.443508][T10266] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 265.450094][T10266] ? mark_lock+0x82/0x1660 19:28:38 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) [ 265.454515][T10266] ? lock_is_held_type+0xbb/0xf0 [ 265.459463][T10266] ? filemap_check_errors+0xa5/0x150 [ 265.464753][T10266] iomap_dio_rw+0x6c7/0x1230 [ 265.469344][T10266] ? iomap_dio_rw+0x1230/0x1230 [ 265.474211][T10266] ? iomap_dio_complete_work+0x80/0x80 [ 265.479672][T10266] ? __wait_on_freeing_inode+0x140/0x140 [ 265.485305][T10266] ? down_write_killable+0x170/0x170 [ 265.490600][T10266] ext4_file_write_iter+0xe28/0x13f0 [ 265.495907][T10266] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 265.501643][T10266] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 265.507628][T10266] ? lock_is_held_type+0xbb/0xf0 [ 265.512571][T10266] ? aa_path_link+0x2f0/0x2f0 [ 265.517246][T10266] new_sync_write+0x422/0x650 [ 265.521954][T10266] ? new_sync_read+0x6e0/0x6e0 [ 265.526695][T10266] ? lock_downgrade+0x830/0x830 [ 265.531523][T10266] ? lock_is_held_type+0xbb/0xf0 [ 265.536491][T10266] ? __sb_start_write+0x1c9/0x450 [ 265.541523][T10266] vfs_write+0x5ad/0x730 [ 265.545771][T10266] ksys_write+0x12d/0x250 [ 265.550105][T10266] ? __ia32_sys_read+0xb0/0xb0 [ 265.554875][T10266] ? check_preemption_disabled+0x50/0x130 [ 265.560596][T10266] ? syscall_enter_from_user_mode+0x1d/0x60 [ 265.566499][T10266] do_syscall_64+0x2d/0x70 [ 265.570918][T10266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 265.576804][T10266] RIP: 0033:0x45de29 [ 265.580702][T10266] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.600302][T10266] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.608714][T10266] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 265.616682][T10266] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 265.624664][T10266] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 265.632631][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.640601][T10266] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:38 executing program 4 (fault-call:6 fault-nth:3): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:38 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x13, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:38 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) 19:28:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:38 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) 19:28:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:38 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x14, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3f00}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 265.911514][ T26] audit: type=1800 audit(1602185318.618:60): pid=10301 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 265.934332][T10301] FAULT_INJECTION: forcing a failure. [ 265.934332][T10301] name failslab, interval 1, probability 0, space 0, times 0 [ 265.970378][T10301] CPU: 1 PID: 10301 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 265.979058][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.989104][T10301] Call Trace: [ 265.992414][T10301] dump_stack+0x198/0x1fd [ 265.996762][T10301] should_fail.cold+0x5/0x14 [ 266.001362][T10301] should_failslab+0x5/0xf [ 266.005776][T10301] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 266.011845][T10301] kmem_cache_alloc_node+0x50/0x430 19:28:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 266.017049][T10301] ? internal_get_user_pages_fast+0x17f3/0x2a70 [ 266.023377][T10301] create_task_io_context+0x2c/0x440 [ 266.028773][T10301] submit_bio_checks+0x19c5/0x1f70 [ 266.033891][T10301] ? blk_update_request+0x1500/0x1500 [ 266.039264][T10301] ? __gup_device_huge+0x3c0/0x3c0 [ 266.044383][T10301] submit_bio_noacct+0x89/0x12b0 [ 266.049329][T10301] ? blk_queue_enter+0xcd0/0xcd0 [ 266.054274][T10301] ? lock_is_held_type+0xbb/0xf0 [ 266.059227][T10301] ? iov_iter_advance+0x234/0xe30 [ 266.064262][T10301] ? __bio_try_merge_page+0xb5/0x3f0 [ 266.069556][T10301] submit_bio+0x263/0x5b0 [ 266.073890][T10301] ? submit_bio_noacct+0x12b0/0x12b0 [ 266.079186][T10301] ? bio_add_pc_page+0x100/0x100 [ 266.084165][T10301] iomap_dio_submit_bio+0x293/0x360 [ 266.089367][T10301] iomap_dio_bio_actor+0x4b3/0xf00 [ 266.094486][T10301] iomap_dio_actor+0x95/0x530 [ 266.099286][T10301] ? lock_is_held_type+0xbb/0xf0 [ 266.104233][T10301] iomap_apply+0x2b6/0xcc0 [ 266.108652][T10301] ? iomap_dio_rw+0x1230/0x1230 [ 266.113505][T10301] ? iomap_dio_rw+0x6c7/0x1230 [ 266.118273][T10301] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 266.124790][T10301] ? mark_lock+0x82/0x1660 [ 266.129209][T10301] ? lock_is_held_type+0xbb/0xf0 [ 266.134158][T10301] ? filemap_check_errors+0xa5/0x150 [ 266.139448][T10301] iomap_dio_rw+0x6c7/0x1230 [ 266.144036][T10301] ? iomap_dio_rw+0x1230/0x1230 [ 266.148913][T10301] ? iomap_dio_complete_work+0x80/0x80 [ 266.154635][T10301] ? __wait_on_freeing_inode+0x140/0x140 [ 266.160378][T10301] ? down_write_killable+0x170/0x170 [ 266.165675][T10301] ext4_file_write_iter+0xe28/0x13f0 [ 266.170982][T10301] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 266.176696][T10301] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 266.182668][T10301] ? lock_is_held_type+0xbb/0xf0 [ 266.187600][T10301] ? aa_path_link+0x2f0/0x2f0 [ 266.192285][T10301] new_sync_write+0x422/0x650 [ 266.196962][T10301] ? new_sync_read+0x6e0/0x6e0 [ 266.201728][T10301] ? lock_downgrade+0x830/0x830 [ 266.206579][T10301] ? lock_is_held_type+0xbb/0xf0 [ 266.211536][T10301] ? __sb_start_write+0x1c9/0x450 [ 266.216579][T10301] vfs_write+0x5ad/0x730 [ 266.220835][T10301] ksys_write+0x12d/0x250 [ 266.225164][T10301] ? __ia32_sys_read+0xb0/0xb0 [ 266.230029][T10301] ? check_preemption_disabled+0x50/0x130 [ 266.235749][T10301] ? syscall_enter_from_user_mode+0x1d/0x60 [ 266.241663][T10301] do_syscall_64+0x2d/0x70 [ 266.246078][T10301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.251968][T10301] RIP: 0033:0x45de29 [ 266.255873][T10301] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.275472][T10301] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.283971][T10301] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 266.291957][T10301] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 266.299939][T10301] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 266.307922][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 266.315895][T10301] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:39 executing program 4 (fault-call:6 fault-nth:4): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:39 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) 19:28:39 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x15, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:39 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) 19:28:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 266.578633][ T26] audit: type=1800 audit(1602185319.288:61): pid=10336 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 266.611718][T10336] FAULT_INJECTION: forcing a failure. [ 266.611718][T10336] name failslab, interval 1, probability 0, space 0, times 0 [ 266.643102][T10336] CPU: 1 PID: 10336 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 266.651787][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.661838][T10336] Call Trace: [ 266.665143][T10336] dump_stack+0x198/0x1fd [ 266.669497][T10336] should_fail.cold+0x5/0x14 [ 266.674098][T10336] should_failslab+0x5/0xf [ 266.678518][T10336] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 266.684590][T10336] kmem_cache_alloc+0x46/0x3f0 [ 266.689363][T10336] ? mempool_alloc+0x350/0x350 [ 266.694126][T10336] mempool_alloc+0x146/0x350 [ 266.698725][T10336] ? mark_lock+0x82/0x1660 [ 266.703163][T10336] ? remove_element+0x1d0/0x1d0 [ 266.708050][T10336] ? __lock_acquire+0xb92/0x5780 [ 266.712996][T10336] ? mark_lock+0x82/0x1660 [ 266.717423][T10336] bio_alloc_bioset+0x37b/0x5d0 [ 266.722284][T10336] ? __lock_acquire+0xb92/0x5780 [ 266.727222][T10336] ? bvec_alloc+0x2f0/0x2f0 [ 266.731838][T10336] bio_clone_fast+0x21/0x1b0 [ 266.736430][T10336] bio_split+0xc7/0x2c0 [ 266.740593][T10336] __blk_queue_split+0x10e1/0x1650 [ 266.745720][T10336] ? bio_will_gap.part.0+0xce0/0xce0 [ 266.751014][T10336] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 266.757609][T10336] blk_mq_submit_bio+0x1b0/0x1760 [ 266.762651][T10336] ? blk_queue_enter+0xb5d/0xcd0 [ 266.767593][T10336] ? blk_mq_try_issue_directly+0x190/0x190 [ 266.773404][T10336] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 266.778972][T10336] ? __gup_device_huge+0x3c0/0x3c0 [ 266.784094][T10336] submit_bio_noacct+0xc78/0x12b0 [ 266.789135][T10336] ? blk_queue_enter+0xcd0/0xcd0 [ 266.794082][T10336] ? __bio_try_merge_page+0xb5/0x3f0 [ 266.799374][T10336] submit_bio+0x263/0x5b0 [ 266.803707][T10336] ? submit_bio_noacct+0x12b0/0x12b0 [ 266.809001][T10336] ? bio_add_pc_page+0x100/0x100 [ 266.813947][T10336] iomap_dio_submit_bio+0x293/0x360 [ 266.819150][T10336] iomap_dio_bio_actor+0x4b3/0xf00 [ 266.824280][T10336] iomap_dio_actor+0x95/0x530 [ 266.828959][T10336] ? lock_is_held_type+0xbb/0xf0 [ 266.833902][T10336] iomap_apply+0x2b6/0xcc0 [ 266.838314][T10336] ? iomap_dio_rw+0x1230/0x1230 [ 266.843161][T10336] ? iomap_dio_rw+0x6c7/0x1230 [ 266.847923][T10336] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 266.854417][T10336] ? mark_lock+0x82/0x1660 [ 266.858840][T10336] ? lock_is_held_type+0xbb/0xf0 [ 266.863791][T10336] ? filemap_check_errors+0xa5/0x150 [ 266.869089][T10336] iomap_dio_rw+0x6c7/0x1230 [ 266.873676][T10336] ? iomap_dio_rw+0x1230/0x1230 [ 266.878539][T10336] ? iomap_dio_complete_work+0x80/0x80 [ 266.884010][T10336] ? __wait_on_freeing_inode+0x140/0x140 [ 266.889662][T10336] ? down_write_killable+0x170/0x170 [ 266.894956][T10336] ext4_file_write_iter+0xe28/0x13f0 [ 266.900263][T10336] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 266.905985][T10336] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 266.911966][T10336] ? lock_is_held_type+0xbb/0xf0 [ 266.916903][T10336] ? aa_path_link+0x2f0/0x2f0 [ 266.921606][T10336] new_sync_write+0x422/0x650 [ 266.926286][T10336] ? new_sync_read+0x6e0/0x6e0 [ 266.931052][T10336] ? lock_downgrade+0x830/0x830 [ 266.935911][T10336] ? lock_is_held_type+0xbb/0xf0 [ 266.940857][T10336] ? __sb_start_write+0x1c9/0x450 [ 266.945884][T10336] vfs_write+0x5ad/0x730 [ 266.950143][T10336] ksys_write+0x12d/0x250 [ 266.954477][T10336] ? __ia32_sys_read+0xb0/0xb0 [ 266.959347][T10336] ? check_preemption_disabled+0x50/0x130 [ 266.965068][T10336] ? syscall_enter_from_user_mode+0x1d/0x60 [ 266.970974][T10336] do_syscall_64+0x2d/0x70 [ 266.975404][T10336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 266.981291][T10336] RIP: 0033:0x45de29 [ 266.985184][T10336] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.004902][T10336] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.013315][T10336] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 267.021284][T10336] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 267.029252][T10336] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 19:28:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:39 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x16, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 267.037226][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 267.045310][T10336] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:39 executing program 4 (fault-call:6 fault-nth:5): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:39 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x17, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:39 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) 19:28:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x3f00}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:40 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) [ 267.344588][ T26] audit: type=1800 audit(1602185320.049:62): pid=10370 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 267.348328][T10370] FAULT_INJECTION: forcing a failure. [ 267.348328][T10370] name failslab, interval 1, probability 0, space 0, times 0 [ 267.424093][T10370] CPU: 0 PID: 10370 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 267.432787][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.442837][T10370] Call Trace: [ 267.446154][T10370] dump_stack+0x198/0x1fd [ 267.450499][T10370] should_fail.cold+0x5/0x14 [ 267.455109][T10370] ? mark_held_locks+0x9f/0xe0 [ 267.459876][T10370] should_failslab+0x5/0xf [ 267.464315][T10370] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 267.470384][T10370] kmem_cache_alloc+0x46/0x3f0 [ 267.475158][T10370] ? mempool_alloc+0x350/0x350 [ 267.479959][T10370] mempool_alloc+0x146/0x350 [ 267.484557][T10370] ? remove_element+0x1d0/0x1d0 [ 267.489409][T10370] ? __lock_acquire+0xb92/0x5780 [ 267.494367][T10370] bio_alloc_bioset+0x37b/0x5d0 [ 267.499229][T10370] ? __lock_acquire+0xb92/0x5780 [ 267.504170][T10370] ? bvec_alloc+0x2f0/0x2f0 [ 267.508699][T10370] bio_clone_fast+0x21/0x1b0 [ 267.513290][T10370] bio_split+0xc7/0x2c0 [ 267.517446][T10370] __blk_queue_split+0x10e1/0x1650 [ 267.522672][T10370] ? bio_will_gap.part.0+0xce0/0xce0 [ 267.527984][T10370] blk_mq_submit_bio+0x1b0/0x1760 [ 267.533018][T10370] ? blk_queue_enter+0xb5d/0xcd0 [ 267.537959][T10370] ? blk_mq_try_issue_directly+0x190/0x190 [ 267.543768][T10370] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 267.549329][T10370] ? __gup_device_huge+0x3c0/0x3c0 [ 267.554450][T10370] submit_bio_noacct+0xc78/0x12b0 [ 267.559483][T10370] ? blk_queue_enter+0xcd0/0xcd0 [ 267.564428][T10370] ? __bio_try_merge_page+0xb5/0x3f0 [ 267.569752][T10370] submit_bio+0x263/0x5b0 [ 267.574089][T10370] ? submit_bio_noacct+0x12b0/0x12b0 [ 267.579393][T10370] ? bio_add_pc_page+0x100/0x100 [ 267.584340][T10370] iomap_dio_submit_bio+0x293/0x360 [ 267.589546][T10370] iomap_dio_bio_actor+0x4b3/0xf00 [ 267.594671][T10370] iomap_dio_actor+0x95/0x530 [ 267.599349][T10370] ? lock_is_held_type+0xbb/0xf0 [ 267.604294][T10370] iomap_apply+0x2b6/0xcc0 [ 267.608715][T10370] ? iomap_dio_rw+0x1230/0x1230 [ 267.613565][T10370] ? iomap_dio_rw+0x6c7/0x1230 [ 267.618332][T10370] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 267.624828][T10370] ? mark_lock+0x82/0x1660 [ 267.629255][T10370] ? lock_is_held_type+0xbb/0xf0 [ 267.634217][T10370] ? filemap_check_errors+0xa5/0x150 [ 267.639505][T10370] iomap_dio_rw+0x6c7/0x1230 [ 267.644093][T10370] ? iomap_dio_rw+0x1230/0x1230 [ 267.648963][T10370] ? iomap_dio_complete_work+0x80/0x80 [ 267.654424][T10370] ? __wait_on_freeing_inode+0x140/0x140 [ 267.660064][T10370] ? down_write_killable+0x170/0x170 [ 267.665384][T10370] ext4_file_write_iter+0xe28/0x13f0 [ 267.670683][T10370] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 267.676403][T10370] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 267.682386][T10370] ? lock_is_held_type+0xbb/0xf0 [ 267.687325][T10370] ? aa_path_link+0x2f0/0x2f0 [ 267.692117][T10370] new_sync_write+0x422/0x650 [ 267.696794][T10370] ? new_sync_read+0x6e0/0x6e0 [ 267.701556][T10370] ? lock_downgrade+0x830/0x830 [ 267.706415][T10370] ? lock_is_held_type+0xbb/0xf0 [ 267.711367][T10370] ? __sb_start_write+0x1c9/0x450 [ 267.716397][T10370] vfs_write+0x5ad/0x730 [ 267.720646][T10370] ksys_write+0x12d/0x250 [ 267.724982][T10370] ? __ia32_sys_read+0xb0/0xb0 [ 267.729769][T10370] ? check_preemption_disabled+0x50/0x130 [ 267.735492][T10370] ? syscall_enter_from_user_mode+0x1d/0x60 [ 267.741392][T10370] do_syscall_64+0x2d/0x70 [ 267.745812][T10370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 267.751699][T10370] RIP: 0033:0x45de29 [ 267.755595][T10370] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.775195][T10370] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.783606][T10370] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 267.791576][T10370] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 267.799544][T10370] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 267.807511][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 267.815476][T10370] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffffa5) 19:28:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:40 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x18, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:28:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:40 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) 19:28:40 executing program 4 (fault-call:6 fault-nth:6): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x180a, 0x800) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf84, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="b09720fe9677", @broadcast}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast, @broadcast}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000080) r4 = accept$unix(r3, &(0x7f00000001c0), &(0x7f0000000040)=0x6e) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000280)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:40 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:40 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) [ 268.270336][ T26] audit: type=1800 audit(1602185320.979:63): pid=10404 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 268.276356][T10404] FAULT_INJECTION: forcing a failure. [ 268.276356][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 268.302819][T10404] CPU: 0 PID: 10404 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 268.311487][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.321540][T10404] Call Trace: [ 268.324834][T10404] dump_stack+0x198/0x1fd [ 268.329170][T10404] should_fail.cold+0x5/0x14 [ 268.333762][T10404] should_failslab+0x5/0xf [ 268.338176][T10404] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 268.344238][T10404] kmem_cache_alloc+0x46/0x3f0 [ 268.349015][T10404] ? mempool_alloc+0x350/0x350 [ 268.353770][T10404] mempool_alloc+0x146/0x350 [ 268.358365][T10404] ? remove_element+0x1d0/0x1d0 [ 268.363232][T10404] ? __lock_acquire+0x164a/0x5780 [ 268.368266][T10404] __sg_alloc_table+0x244/0x380 [ 268.373126][T10404] sg_alloc_table_chained+0x9b/0x1e0 [ 268.378421][T10404] ? sg_alloc_table_chained+0x1e0/0x1e0 [ 268.384034][T10404] scsi_init_io+0x23d/0xe50 [ 268.388537][T10404] ? find_held_lock+0x2d/0x110 [ 268.393320][T10404] ? scsi_end_request+0x8f0/0x8f0 [ 268.398339][T10404] ? mark_lock+0x82/0x1660 [ 268.402810][T10404] sd_init_command+0x214/0x3670 [ 268.407659][T10404] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 268.414173][T10404] ? read_seqcount_t_begin.constprop.0+0x133/0x1e0 [ 268.420678][T10404] ? sd_setup_write_same16_cmnd+0x6f0/0x6f0 [ 268.426572][T10404] ? blk_add_timer+0x1e9/0x2c0 [ 268.431344][T10404] scsi_queue_rq+0xffc/0x3410 [ 268.436034][T10404] blk_mq_dispatch_rq_list+0x3a1/0x1d10 [ 268.441596][T10404] ? elv_rb_del+0x50/0x90 [ 268.445921][T10404] ? blk_mq_dequeue_from_ctx+0x8b0/0x8b0 [ 268.451546][T10404] ? do_raw_spin_unlock+0x171/0x230 [ 268.456735][T10404] ? _raw_spin_unlock+0x24/0x40 [ 268.461648][T10404] ? dd_dispatch_request+0x225/0x880 19:28:41 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r7, 0xe01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x40, 0x4, 0x20, @private2, @private2, 0x40, 0x700, 0x8000, 0xacc6}}) accept(0xffffffffffffffff, &(0x7f0000000400)=@can={0x1d, 0x0}, &(0x7f0000000480)=0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x17c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4ae23f2b35208c36}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x30, r4, 0x129, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r8, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 268.466935][T10404] __blk_mq_do_dispatch_sched+0x3bc/0x890 [ 268.472656][T10404] ? blk_mq_sched_free_hctx_data+0x1e0/0x1e0 [ 268.478629][T10404] ? lock_acquire+0x1f3/0xaf0 [ 268.483301][T10404] ? hctx_lock+0x7f/0x1d0 [ 268.487639][T10404] __blk_mq_sched_dispatch_requests+0x361/0x490 [ 268.493878][T10404] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 268.499872][T10404] ? blk_mq_do_dispatch_ctx+0x640/0x640 [ 268.505428][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.510369][T10404] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 268.516364][T10404] __blk_mq_run_hw_queue+0x13a/0x2d0 19:28:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 268.521650][T10404] ? trace_block_unplug+0x300/0x300 [ 268.526864][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.531801][T10404] ? find_held_lock+0x2d/0x110 [ 268.536561][T10404] __blk_mq_delay_run_hw_queue+0x522/0x5f0 [ 268.542369][T10404] blk_mq_run_hw_queue+0x16c/0x2f0 [ 268.547477][T10404] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 268.553378][T10404] ? dd_merged_requests+0x3d0/0x3d0 [ 268.558569][T10404] blk_mq_sched_insert_requests+0x286/0x620 [ 268.564467][T10404] blk_mq_flush_plug_list+0x3d8/0x560 [ 268.569840][T10404] ? blk_mq_insert_requests+0x620/0x620 [ 268.575485][T10404] ? kblockd_mod_delayed_work_on+0x30/0x30 [ 268.581297][T10404] ? update_io_ticks+0xcc/0x1b0 [ 268.586160][T10404] blk_flush_plug_list+0x4d/0x5f [ 268.591119][T10404] blk_mq_submit_bio+0xae0/0x1760 [ 268.596158][T10404] ? blk_queue_enter+0xb5d/0xcd0 [ 268.601096][T10404] ? blk_mq_try_issue_directly+0x190/0x190 [ 268.607084][T10404] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 268.612646][T10404] ? __gup_device_huge+0x3c0/0x3c0 [ 268.617769][T10404] submit_bio_noacct+0xc78/0x12b0 [ 268.622793][T10404] ? blk_queue_enter+0xcd0/0xcd0 [ 268.627740][T10404] ? __bio_try_merge_page+0xb5/0x3f0 [ 268.633031][T10404] submit_bio+0x263/0x5b0 [ 268.637472][T10404] ? submit_bio_noacct+0x12b0/0x12b0 [ 268.642774][T10404] ? bio_add_pc_page+0x100/0x100 [ 268.647853][T10404] iomap_dio_submit_bio+0x293/0x360 [ 268.653060][T10404] iomap_dio_bio_actor+0x4b3/0xf00 [ 268.658190][T10404] iomap_dio_actor+0x95/0x530 [ 268.662872][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.667815][T10404] iomap_apply+0x2b6/0xcc0 [ 268.672250][T10404] ? iomap_dio_rw+0x1230/0x1230 [ 268.677105][T10404] ? iomap_dio_rw+0x6c7/0x1230 [ 268.681882][T10404] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 268.688381][T10404] ? mark_lock+0x82/0x1660 [ 268.692823][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.697773][T10404] ? filemap_check_errors+0xa5/0x150 [ 268.703065][T10404] iomap_dio_rw+0x6c7/0x1230 [ 268.707655][T10404] ? iomap_dio_rw+0x1230/0x1230 [ 268.712523][T10404] ? iomap_dio_complete_work+0x80/0x80 [ 268.717981][T10404] ? __wait_on_freeing_inode+0x140/0x140 [ 268.723629][T10404] ? down_write_killable+0x170/0x170 [ 268.728922][T10404] ext4_file_write_iter+0xe28/0x13f0 [ 268.734321][T10404] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 268.740054][T10404] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 268.746036][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.750979][T10404] ? aa_path_link+0x2f0/0x2f0 [ 268.755685][T10404] new_sync_write+0x422/0x650 [ 268.760362][T10404] ? new_sync_read+0x6e0/0x6e0 [ 268.765133][T10404] ? lock_downgrade+0x830/0x830 [ 268.770001][T10404] ? lock_is_held_type+0xbb/0xf0 [ 268.774950][T10404] ? __sb_start_write+0x1c9/0x450 [ 268.779989][T10404] vfs_write+0x5ad/0x730 [ 268.784237][T10404] ksys_write+0x12d/0x250 [ 268.788565][T10404] ? __ia32_sys_read+0xb0/0xb0 [ 268.793336][T10404] ? check_preemption_disabled+0x50/0x130 [ 268.799058][T10404] ? syscall_enter_from_user_mode+0x1d/0x60 [ 268.804954][T10404] do_syscall_64+0x2d/0x70 [ 268.809366][T10404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 268.815257][T10404] RIP: 0033:0x45de29 [ 268.819147][T10404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.838737][T10404] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.847144][T10404] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 268.855113][T10404] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 268.863084][T10404] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 268.871081][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 268.879053][T10404] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:41 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) 19:28:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:41 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:41 executing program 4 (fault-call:6 fault-nth:7): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x22, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x124, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008000}, 0x40004) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, {0x4000000, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1003, 0x8000, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0x20, 0x4, 0x8b}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:41 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) 19:28:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:41 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r6 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) setsockopt(r6, 0x17, 0x5, &(0x7f0000000380)="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", 0xfb) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x1) [ 269.231299][ T26] audit: type=1800 audit(1602185321.939:64): pid=10439 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 269.238130][T10439] FAULT_INJECTION: forcing a failure. [ 269.238130][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 269.338834][T10439] CPU: 0 PID: 10439 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 269.347634][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.357875][T10439] Call Trace: [ 269.361192][T10439] dump_stack+0x198/0x1fd [ 269.365525][T10439] should_fail.cold+0x5/0x14 [ 269.370119][T10439] should_failslab+0x5/0xf [ 269.374534][T10439] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 269.380607][T10439] kmem_cache_alloc+0x46/0x3f0 [ 269.385379][T10439] ? mempool_alloc+0x350/0x350 [ 269.390143][T10439] mempool_alloc+0x146/0x350 [ 269.394739][T10439] ? remove_element+0x1d0/0x1d0 [ 269.399591][T10439] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 269.405572][T10439] ? hctx_unlock+0x8b/0x170 [ 269.410080][T10439] ? __blk_mq_run_hw_queue+0x146/0x2d0 [ 269.415548][T10439] bio_alloc_bioset+0x37b/0x5d0 [ 269.420405][T10439] ? __lock_acquire+0xb92/0x5780 [ 269.425338][T10439] ? bvec_alloc+0x2f0/0x2f0 [ 269.429856][T10439] bio_clone_fast+0x21/0x1b0 [ 269.434453][T10439] bio_split+0xc7/0x2c0 [ 269.438612][T10439] __blk_queue_split+0x10e1/0x1650 [ 269.443734][T10439] ? bio_will_gap.part.0+0xce0/0xce0 [ 269.449032][T10439] blk_mq_submit_bio+0x1b0/0x1760 [ 269.454056][T10439] ? blk_queue_enter+0xb5d/0xcd0 [ 269.458992][T10439] ? blk_mq_try_issue_directly+0x190/0x190 [ 269.464796][T10439] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 269.470362][T10439] ? __gup_device_huge+0x3c0/0x3c0 [ 269.475513][T10439] submit_bio_noacct+0xc78/0x12b0 [ 269.480539][T10439] ? blk_queue_enter+0xcd0/0xcd0 [ 269.485487][T10439] ? __bio_try_merge_page+0xb5/0x3f0 [ 269.490781][T10439] submit_bio+0x263/0x5b0 [ 269.495106][T10439] ? submit_bio_noacct+0x12b0/0x12b0 [ 269.500397][T10439] ? bio_add_pc_page+0x100/0x100 [ 269.505343][T10439] iomap_dio_submit_bio+0x293/0x360 [ 269.510544][T10439] iomap_dio_bio_actor+0x4b3/0xf00 [ 269.515665][T10439] iomap_dio_actor+0x95/0x530 [ 269.520426][T10439] ? lock_is_held_type+0xbb/0xf0 [ 269.525371][T10439] iomap_apply+0x2b6/0xcc0 [ 269.529811][T10439] ? iomap_dio_rw+0x1230/0x1230 [ 269.534658][T10439] ? iomap_dio_rw+0x6c7/0x1230 19:28:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) 19:28:42 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 269.539419][T10439] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 269.545914][T10439] ? mark_lock+0x82/0x1660 [ 269.550339][T10439] ? lock_is_held_type+0xbb/0xf0 [ 269.555289][T10439] ? filemap_check_errors+0xa5/0x150 [ 269.560578][T10439] iomap_dio_rw+0x6c7/0x1230 [ 269.565171][T10439] ? iomap_dio_rw+0x1230/0x1230 [ 269.570042][T10439] ? iomap_dio_complete_work+0x80/0x80 [ 269.575497][T10439] ? __wait_on_freeing_inode+0x140/0x140 [ 269.581132][T10439] ? down_write_killable+0x170/0x170 [ 269.586430][T10439] ext4_file_write_iter+0xe28/0x13f0 [ 269.591727][T10439] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 269.597446][T10439] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 269.603435][T10439] ? lock_is_held_type+0xbb/0xf0 [ 269.608372][T10439] ? aa_path_link+0x2f0/0x2f0 [ 269.613059][T10439] new_sync_write+0x422/0x650 [ 269.617753][T10439] ? new_sync_read+0x6e0/0x6e0 [ 269.622523][T10439] ? lock_downgrade+0x830/0x830 [ 269.627382][T10439] ? lock_is_held_type+0xbb/0xf0 [ 269.632321][T10439] ? __sb_start_write+0x1c9/0x450 [ 269.637341][T10439] vfs_write+0x5ad/0x730 [ 269.641678][T10439] ksys_write+0x12d/0x250 [ 269.646004][T10439] ? __ia32_sys_read+0xb0/0xb0 [ 269.650768][T10439] ? check_preemption_disabled+0x50/0x130 [ 269.656571][T10439] ? syscall_enter_from_user_mode+0x1d/0x60 [ 269.662491][T10439] do_syscall_64+0x2d/0x70 [ 269.666904][T10439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 269.672810][T10439] RIP: 0033:0x45de29 [ 269.676705][T10439] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.696298][T10439] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.704707][T10439] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 269.712762][T10439] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 269.720734][T10439] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 269.728704][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 19:28:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:42 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) [ 269.736672][T10439] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:42 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1e, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:42 executing program 4 (fault-call:6 fault-nth:8): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:42 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) 19:28:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x9, 0x24, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)=0x1) 19:28:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 19:28:42 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 270.117637][ T26] audit: type=1800 audit(1602185322.829:65): pid=10484 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 270.146287][T10484] FAULT_INJECTION: forcing a failure. [ 270.146287][T10484] name failslab, interval 1, probability 0, space 0, times 0 [ 270.159235][T10484] CPU: 1 PID: 10484 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 270.167898][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.177948][T10484] Call Trace: [ 270.181232][T10484] dump_stack+0x198/0x1fd [ 270.185551][T10484] should_fail.cold+0x5/0x14 [ 270.190132][T10484] should_failslab+0x5/0xf [ 270.194532][T10484] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 270.200601][T10484] kmem_cache_alloc+0x46/0x3f0 [ 270.205346][T10484] ? mempool_alloc+0x350/0x350 [ 270.210088][T10484] mempool_alloc+0x146/0x350 [ 270.214660][T10484] ? remove_element+0x1d0/0x1d0 [ 270.219490][T10484] ? __lock_acquire+0x164a/0x5780 [ 270.224497][T10484] __sg_alloc_table+0x244/0x380 [ 270.229333][T10484] sg_alloc_table_chained+0x9b/0x1e0 [ 270.234596][T10484] ? sg_alloc_table_chained+0x1e0/0x1e0 [ 270.240140][T10484] scsi_init_io+0x23d/0xe50 [ 270.244625][T10484] ? find_held_lock+0x2d/0x110 [ 270.249365][T10484] ? scsi_end_request+0x8f0/0x8f0 [ 270.254361][T10484] ? mark_lock+0x82/0x1660 [ 270.258762][T10484] sd_init_command+0x214/0x3670 [ 270.263594][T10484] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 [ 270.270078][T10484] ? read_seqcount_t_begin.constprop.0+0x133/0x1e0 [ 270.276649][T10484] ? sd_setup_write_same16_cmnd+0x6f0/0x6f0 [ 270.282524][T10484] ? blk_add_timer+0x1e9/0x2c0 [ 270.287282][T10484] scsi_queue_rq+0xffc/0x3410 [ 270.291954][T10484] blk_mq_dispatch_rq_list+0x3a1/0x1d10 [ 270.297487][T10484] ? elv_rb_del+0x50/0x90 [ 270.301802][T10484] ? blk_mq_dequeue_from_ctx+0x8b0/0x8b0 [ 270.307412][T10484] ? do_raw_spin_unlock+0x171/0x230 [ 270.312598][T10484] ? _raw_spin_unlock+0x24/0x40 [ 270.317442][T10484] ? dd_dispatch_request+0x225/0x880 [ 270.322709][T10484] __blk_mq_do_dispatch_sched+0x3bc/0x890 [ 270.328409][T10484] ? blk_mq_sched_free_hctx_data+0x1e0/0x1e0 [ 270.334363][T10484] ? lock_acquire+0x1f3/0xaf0 [ 270.339012][T10484] ? hctx_lock+0x7f/0x1d0 [ 270.343326][T10484] __blk_mq_sched_dispatch_requests+0x361/0x490 [ 270.349539][T10484] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 270.355496][T10484] ? blk_mq_do_dispatch_ctx+0x640/0x640 [ 270.361038][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.365959][T10484] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 270.371920][T10484] __blk_mq_run_hw_queue+0x13a/0x2d0 [ 270.377185][T10484] ? trace_block_unplug+0x300/0x300 [ 270.382360][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.387282][T10484] ? find_held_lock+0x2d/0x110 [ 270.392041][T10484] __blk_mq_delay_run_hw_queue+0x522/0x5f0 [ 270.397836][T10484] blk_mq_run_hw_queue+0x16c/0x2f0 [ 270.402933][T10484] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 270.408813][T10484] ? dd_merged_requests+0x3d0/0x3d0 [ 270.414004][T10484] blk_mq_sched_insert_requests+0x286/0x620 [ 270.419879][T10484] blk_mq_flush_plug_list+0x3d8/0x560 [ 270.425247][T10484] ? blk_mq_insert_requests+0x620/0x620 [ 270.430780][T10484] ? kblockd_mod_delayed_work_on+0x30/0x30 [ 270.436570][T10484] ? update_io_ticks+0xcc/0x1b0 [ 270.441399][T10484] blk_flush_plug_list+0x4d/0x5f [ 270.446312][T10484] blk_mq_submit_bio+0xae0/0x1760 [ 270.451313][T10484] ? blk_queue_enter+0xb5d/0xcd0 [ 270.456243][T10484] ? blk_mq_try_issue_directly+0x190/0x190 [ 270.462122][T10484] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 270.467671][T10484] ? __gup_device_huge+0x3c0/0x3c0 [ 270.472776][T10484] submit_bio_noacct+0xc78/0x12b0 [ 270.477784][T10484] ? blk_queue_enter+0xcd0/0xcd0 [ 270.482708][T10484] ? __bio_try_merge_page+0xb5/0x3f0 [ 270.487971][T10484] submit_bio+0x263/0x5b0 [ 270.492283][T10484] ? submit_bio_noacct+0x12b0/0x12b0 [ 270.497551][T10484] ? bio_add_pc_page+0x100/0x100 [ 270.502473][T10484] iomap_dio_submit_bio+0x293/0x360 [ 270.507653][T10484] iomap_dio_bio_actor+0x4b3/0xf00 [ 270.512763][T10484] iomap_dio_actor+0x95/0x530 [ 270.517439][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.522362][T10484] iomap_apply+0x2b6/0xcc0 [ 270.526803][T10484] ? iomap_dio_rw+0x1230/0x1230 [ 270.531630][T10484] ? iomap_dio_rw+0x6c7/0x1230 [ 270.536381][T10484] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 270.542858][T10484] ? mark_lock+0x82/0x1660 [ 270.547255][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.552214][T10484] ? filemap_check_errors+0xa5/0x150 [ 270.557481][T10484] iomap_dio_rw+0x6c7/0x1230 [ 270.562051][T10484] ? iomap_dio_rw+0x1230/0x1230 [ 270.566889][T10484] ? iomap_dio_complete_work+0x80/0x80 [ 270.572326][T10484] ? __wait_on_freeing_inode+0x140/0x140 [ 270.578030][T10484] ? down_write_killable+0x170/0x170 [ 270.583299][T10484] ext4_file_write_iter+0xe28/0x13f0 [ 270.588574][T10484] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 270.594276][T10484] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 270.600236][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.605153][T10484] ? aa_path_link+0x2f0/0x2f0 [ 270.609819][T10484] new_sync_write+0x422/0x650 [ 270.614477][T10484] ? new_sync_read+0x6e0/0x6e0 [ 270.619218][T10484] ? lock_downgrade+0x830/0x830 [ 270.624053][T10484] ? lock_is_held_type+0xbb/0xf0 [ 270.628977][T10484] ? __sb_start_write+0x1c9/0x450 [ 270.633982][T10484] vfs_write+0x5ad/0x730 [ 270.638204][T10484] ksys_write+0x12d/0x250 [ 270.642514][T10484] ? __ia32_sys_read+0xb0/0xb0 [ 270.647256][T10484] ? check_preemption_disabled+0x50/0x130 [ 270.652955][T10484] ? syscall_enter_from_user_mode+0x1d/0x60 [ 270.658918][T10484] do_syscall_64+0x2d/0x70 [ 270.663313][T10484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 270.669184][T10484] RIP: 0033:0x45de29 [ 270.673058][T10484] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.692665][T10484] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.701061][T10484] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 270.709012][T10484] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 19:28:43 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) 19:28:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 270.716964][T10484] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 270.724914][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 270.732868][T10484] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:43 executing program 4 (fault-call:6 fault-nth:9): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 270.883143][ T26] audit: type=1800 audit(1602185323.589:66): pid=10494 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 270.888709][T10494] FAULT_INJECTION: forcing a failure. [ 270.888709][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 270.923358][T10494] CPU: 1 PID: 10494 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 [ 270.932041][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.942100][T10494] Call Trace: [ 270.945396][T10494] dump_stack+0x198/0x1fd [ 270.949749][T10494] should_fail.cold+0x5/0x14 [ 270.954342][T10494] should_failslab+0x5/0xf [ 270.958755][T10494] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 270.964819][T10494] kmem_cache_alloc+0x46/0x3f0 [ 270.969585][T10494] ? mempool_alloc+0x350/0x350 [ 270.974345][T10494] mempool_alloc+0x146/0x350 [ 270.978934][T10494] ? remove_element+0x1d0/0x1d0 [ 270.983782][T10494] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 270.989760][T10494] ? hctx_unlock+0x8b/0x170 [ 270.994258][T10494] ? __blk_mq_run_hw_queue+0x146/0x2d0 [ 270.999743][T10494] bio_alloc_bioset+0x37b/0x5d0 [ 271.004595][T10494] ? __lock_acquire+0xb92/0x5780 [ 271.009527][T10494] ? bvec_alloc+0x2f0/0x2f0 [ 271.014037][T10494] bio_clone_fast+0x21/0x1b0 [ 271.018630][T10494] bio_split+0xc7/0x2c0 [ 271.022791][T10494] __blk_queue_split+0x10e1/0x1650 [ 271.027922][T10494] ? bio_will_gap.part.0+0xce0/0xce0 [ 271.033302][T10494] blk_mq_submit_bio+0x1b0/0x1760 [ 271.038324][T10494] ? blk_queue_enter+0xb5d/0xcd0 [ 271.043253][T10494] ? blk_mq_try_issue_directly+0x190/0x190 [ 271.049057][T10494] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 271.054717][T10494] ? __gup_device_huge+0x3c0/0x3c0 [ 271.059828][T10494] submit_bio_noacct+0xc78/0x12b0 [ 271.064857][T10494] ? blk_queue_enter+0xcd0/0xcd0 [ 271.069806][T10494] ? __bio_try_merge_page+0xb5/0x3f0 [ 271.075093][T10494] submit_bio+0x263/0x5b0 [ 271.079419][T10494] ? submit_bio_noacct+0x12b0/0x12b0 [ 271.084714][T10494] ? bio_add_pc_page+0x100/0x100 [ 271.089661][T10494] iomap_dio_submit_bio+0x293/0x360 [ 271.094869][T10494] iomap_dio_bio_actor+0x4b3/0xf00 [ 271.100004][T10494] iomap_dio_actor+0x95/0x530 [ 271.104681][T10494] ? lock_is_held_type+0xbb/0xf0 [ 271.109624][T10494] iomap_apply+0x2b6/0xcc0 [ 271.114041][T10494] ? iomap_dio_rw+0x1230/0x1230 [ 271.118894][T10494] ? iomap_dio_rw+0x6c7/0x1230 [ 271.123670][T10494] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 271.130173][T10494] ? mark_lock+0x82/0x1660 [ 271.134601][T10494] ? lock_is_held_type+0xbb/0xf0 [ 271.139556][T10494] ? filemap_check_errors+0xa5/0x150 [ 271.144847][T10494] iomap_dio_rw+0x6c7/0x1230 [ 271.149434][T10494] ? iomap_dio_rw+0x1230/0x1230 [ 271.154298][T10494] ? iomap_dio_complete_work+0x80/0x80 [ 271.159759][T10494] ? __wait_on_freeing_inode+0x140/0x140 [ 271.165397][T10494] ? down_write_killable+0x170/0x170 [ 271.170702][T10494] ext4_file_write_iter+0xe28/0x13f0 [ 271.176004][T10494] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 271.181720][T10494] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 271.187703][T10494] ? lock_is_held_type+0xbb/0xf0 [ 271.192641][T10494] ? aa_path_link+0x2f0/0x2f0 [ 271.197344][T10494] new_sync_write+0x422/0x650 [ 271.202023][T10494] ? new_sync_read+0x6e0/0x6e0 [ 271.206790][T10494] ? lock_downgrade+0x830/0x830 [ 271.211648][T10494] ? lock_is_held_type+0xbb/0xf0 [ 271.216595][T10494] ? __sb_start_write+0x1c9/0x450 [ 271.221628][T10494] vfs_write+0x5ad/0x730 [ 271.225881][T10494] ksys_write+0x12d/0x250 [ 271.230212][T10494] ? __ia32_sys_read+0xb0/0xb0 [ 271.234981][T10494] ? check_preemption_disabled+0x50/0x130 [ 271.240704][T10494] ? syscall_enter_from_user_mode+0x1d/0x60 [ 271.246603][T10494] do_syscall_64+0x2d/0x70 [ 271.251019][T10494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 271.256906][T10494] RIP: 0033:0x45de29 [ 271.260803][T10494] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:28:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) [ 271.280490][T10494] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.288899][T10494] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 271.296871][T10494] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 271.304842][T10494] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 271.312821][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 271.320799][T10494] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:44 executing program 4 (fault-call:6 fault-nth:10): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 271.611443][ T26] audit: type=1800 audit(1602185324.319:67): pid=10509 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 271.635563][T10509] FAULT_INJECTION: forcing a failure. [ 271.635563][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 271.648277][T10509] CPU: 0 PID: 10509 Comm: syz-executor.4 Not tainted 5.9.0-rc8-syzkaller #0 19:28:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x34, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000280)="cd5aca74c8bcbba6cdf0bb92c0ace13dc138fc332f5325fa580654e190b3baba8379b3b74ad79df9f745382cf9ead9bf9e71b20772ce4426dc97576b05c438a82ec0f4b3cc577a1f474ae93e77f6897028cec6e70d0b9da8f02a34d08ec4bf64641fab7009c80dc39a82b4b00f97eb9e654f395d888e636f737d448a22aff1b5e84d46e170d48ff29960d8b7b2c265792489f39f23d4c2e3bb09d694") ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f00"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x80000, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x4, 0x0, 0x6}}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_FONT(r8, 0x4b61, &(0x7f0000000340)="20d8a49887125c6cc2700928d5bafc5c0814b778f09e7a821b7affb6e882c9821b275915cf2b22d3be8a95b9731d2ec7d2e3a93d6acf0fc1439d795e9a39693b2cc0f205e3ef7866b816a5a083025f8903485f1ba702ab83565f47f614d0703a2fdaaf8ad2c06c02673484622c8bcfe2d267e874f101e6c19804c403785dd86fe12a1e3073e0e56c1ecb60efa0") [ 271.656944][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.666996][T10509] Call Trace: [ 271.670290][T10509] dump_stack+0x198/0x1fd [ 271.674638][T10509] should_fail.cold+0x5/0x14 [ 271.679237][T10509] should_failslab+0x5/0xf [ 271.683653][T10509] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 271.689722][T10509] kmem_cache_alloc+0x46/0x3f0 [ 271.694516][T10509] ? mempool_alloc+0x350/0x350 [ 271.699296][T10509] mempool_alloc+0x146/0x350 [ 271.703930][T10509] ? remove_element+0x1d0/0x1d0 [ 271.708807][T10509] ? __lock_acquire+0x164a/0x5780 [ 271.713860][T10509] __sg_alloc_table+0x244/0x380 [ 271.718719][T10509] sg_alloc_table_chained+0x9b/0x1e0 [ 271.724004][T10509] ? sg_alloc_table_chained+0x1e0/0x1e0 [ 271.729561][T10509] scsi_init_io+0x23d/0xe50 [ 271.734073][T10509] ? find_held_lock+0x2d/0x110 [ 271.738843][T10509] ? scsi_end_request+0x8f0/0x8f0 [ 271.743865][T10509] ? mark_lock+0x82/0x1660 [ 271.748298][T10509] sd_init_command+0x214/0x3670 [ 271.753159][T10509] ? read_seqcount_t_begin.constprop.0+0x17d/0x1e0 19:28:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) setsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f00000001c0)=0x7, 0x4) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 271.759669][T10509] ? read_seqcount_t_begin.constprop.0+0x133/0x1e0 [ 271.766171][T10509] ? sd_setup_write_same16_cmnd+0x6f0/0x6f0 [ 271.772068][T10509] ? blk_add_timer+0x1e9/0x2c0 [ 271.776843][T10509] scsi_queue_rq+0xffc/0x3410 [ 271.781542][T10509] blk_mq_dispatch_rq_list+0x3a1/0x1d10 [ 271.787102][T10509] ? elv_rb_del+0x50/0x90 [ 271.791533][T10509] ? blk_mq_dequeue_from_ctx+0x8b0/0x8b0 [ 271.797164][T10509] ? do_raw_spin_unlock+0x171/0x230 [ 271.802365][T10509] ? _raw_spin_unlock+0x24/0x40 [ 271.807223][T10509] ? dd_dispatch_request+0x225/0x880 [ 271.812527][T10509] __blk_mq_do_dispatch_sched+0x3bc/0x890 [ 271.818252][T10509] ? blk_mq_sched_free_hctx_data+0x1e0/0x1e0 [ 271.824237][T10509] ? lock_acquire+0x1f3/0xaf0 [ 271.828915][T10509] ? hctx_lock+0x7f/0x1d0 [ 271.833279][T10509] __blk_mq_sched_dispatch_requests+0x361/0x490 [ 271.839520][T10509] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 271.845500][T10509] ? blk_mq_do_dispatch_ctx+0x640/0x640 [ 271.851053][T10509] ? lock_is_held_type+0xbb/0xf0 [ 271.856012][T10509] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 271.861993][T10509] __blk_mq_run_hw_queue+0x13a/0x2d0 [ 271.867276][T10509] ? trace_block_unplug+0x300/0x300 [ 271.872478][T10509] ? lock_is_held_type+0xbb/0xf0 [ 271.877415][T10509] ? find_held_lock+0x2d/0x110 [ 271.882180][T10509] __blk_mq_delay_run_hw_queue+0x522/0x5f0 [ 271.888101][T10509] blk_mq_run_hw_queue+0x16c/0x2f0 [ 271.893218][T10509] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 271.899120][T10509] ? dd_merged_requests+0x3d0/0x3d0 [ 271.904319][T10509] blk_mq_sched_insert_requests+0x286/0x620 [ 271.910217][T10509] blk_mq_flush_plug_list+0x3d8/0x560 [ 271.915611][T10509] ? blk_mq_insert_requests+0x620/0x620 [ 271.921153][T10509] ? kblockd_mod_delayed_work_on+0x30/0x30 [ 271.926961][T10509] ? update_io_ticks+0xcc/0x1b0 [ 271.931816][T10509] blk_flush_plug_list+0x4d/0x5f [ 271.936755][T10509] blk_mq_submit_bio+0xae0/0x1760 [ 271.941779][T10509] ? blk_queue_enter+0xb5d/0xcd0 [ 271.946717][T10509] ? blk_mq_try_issue_directly+0x190/0x190 [ 271.952518][T10509] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 271.958072][T10509] ? __gup_device_huge+0x3c0/0x3c0 [ 271.963183][T10509] submit_bio_noacct+0xc78/0x12b0 [ 271.968211][T10509] ? blk_queue_enter+0xcd0/0xcd0 [ 271.973162][T10509] ? __bio_try_merge_page+0xb5/0x3f0 [ 271.978453][T10509] submit_bio+0x263/0x5b0 [ 271.982891][T10509] ? submit_bio_noacct+0x12b0/0x12b0 [ 271.988187][T10509] ? bio_add_pc_page+0x100/0x100 [ 271.993134][T10509] iomap_dio_submit_bio+0x293/0x360 [ 271.998427][T10509] iomap_dio_bio_actor+0x4b3/0xf00 [ 272.003552][T10509] iomap_dio_actor+0x95/0x530 [ 272.008228][T10509] ? lock_is_held_type+0xbb/0xf0 [ 272.013169][T10509] iomap_apply+0x2b6/0xcc0 [ 272.017589][T10509] ? iomap_dio_rw+0x1230/0x1230 [ 272.022440][T10509] ? iomap_dio_rw+0x6c7/0x1230 [ 272.027206][T10509] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 272.033695][T10509] ? mark_lock+0x82/0x1660 [ 272.038107][T10509] ? lock_is_held_type+0xbb/0xf0 [ 272.043059][T10509] ? filemap_check_errors+0xa5/0x150 [ 272.048349][T10509] iomap_dio_rw+0x6c7/0x1230 [ 272.052959][T10509] ? iomap_dio_rw+0x1230/0x1230 [ 272.057822][T10509] ? iomap_dio_complete_work+0x80/0x80 [ 272.063270][T10509] ? __wait_on_freeing_inode+0x140/0x140 [ 272.068906][T10509] ? down_write_killable+0x170/0x170 [ 272.074201][T10509] ext4_file_write_iter+0xe28/0x13f0 [ 272.079488][T10509] ? ext4_buffered_write_iter+0x4a0/0x4a0 [ 272.085189][T10509] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 272.091152][T10509] ? lock_is_held_type+0xbb/0xf0 [ 272.096067][T10509] ? aa_path_link+0x2f0/0x2f0 [ 272.100733][T10509] new_sync_write+0x422/0x650 [ 272.105402][T10509] ? new_sync_read+0x6e0/0x6e0 [ 272.110149][T10509] ? lock_downgrade+0x830/0x830 [ 272.114986][T10509] ? lock_is_held_type+0xbb/0xf0 [ 272.119913][T10509] ? __sb_start_write+0x1c9/0x450 [ 272.124922][T10509] vfs_write+0x5ad/0x730 [ 272.129279][T10509] ksys_write+0x12d/0x250 [ 272.133601][T10509] ? __ia32_sys_read+0xb0/0xb0 [ 272.138349][T10509] ? check_preemption_disabled+0x50/0x130 [ 272.144055][T10509] ? syscall_enter_from_user_mode+0x1d/0x60 [ 272.149960][T10509] do_syscall_64+0x2d/0x70 [ 272.154356][T10509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 272.160222][T10509] RIP: 0033:0x45de29 [ 272.164097][T10509] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.183672][T10509] RSP: 002b:00007f430c1f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.192060][T10509] RAX: ffffffffffffffda RBX: 000000000003b540 RCX: 000000000045de29 [ 272.200011][T10509] RDX: 00000000001fee00 RSI: 0000000020000200 RDI: 0000000000000003 [ 272.207962][T10509] RBP: 00007f430c1f7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 272.215911][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 272.223861][T10509] R13: 000000000169fb7f R14: 00007f430c1f89c0 R15: 000000000118bf2c 19:28:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) 19:28:45 executing program 2: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x40000) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\xf6\xb0\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r6 = dup(r5) sched_getscheduler(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x22, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:45 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) 19:28:45 executing program 1: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x11, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 273.114239][ T26] audit: type=1800 audit(1602185325.819:68): pid=10547 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 1 (fault-call:12 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:45 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) 19:28:45 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x23, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 273.357650][T10538] device wlan1 entered promiscuous mode [ 273.388037][T10561] FAULT_INJECTION: forcing a failure. [ 273.388037][T10561] name failslab, interval 1, probability 0, space 0, times 0 [ 273.437122][T10561] CPU: 0 PID: 10561 Comm: syz-executor.1 Not tainted 5.9.0-rc8-syzkaller #0 [ 273.445808][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.455854][T10561] Call Trace: [ 273.459145][T10561] dump_stack+0x198/0x1fd [ 273.463480][T10561] should_fail.cold+0x5/0x14 [ 273.468075][T10561] ? do_sys_poll+0x270/0xd40 [ 273.472666][T10561] should_failslab+0x5/0xf [ 273.477091][T10561] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 273.483165][T10561] __kmalloc+0x6f/0x360 [ 273.487328][T10561] ? __might_fault+0x190/0x1d0 [ 273.492124][T10561] do_sys_poll+0x270/0xd40 [ 273.496558][T10561] ? is_bpf_text_address+0xcb/0x160 [ 273.501792][T10561] ? compat_core_sys_select+0x7c0/0x7c0 [ 273.507361][T10561] ? mark_lock+0x82/0x1660 [ 273.511806][T10561] ? mark_lock+0x82/0x1660 [ 273.516238][T10561] ? __lock_acquire+0xb92/0x5780 [ 273.521186][T10561] ? lock_downgrade+0x830/0x830 [ 273.526044][T10561] ? _parse_integer+0x132/0x180 [ 273.530904][T10561] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 273.536889][T10561] ? _kstrtoull+0x186/0x420 [ 273.541401][T10561] ? lock_is_held_type+0xbb/0xf0 [ 273.546337][T10561] ? find_held_lock+0x2d/0x110 [ 273.551104][T10561] ? lock_is_held_type+0xbb/0xf0 [ 273.556039][T10561] ? find_held_lock+0x2d/0x110 [ 273.560825][T10561] ? ksys_write+0x212/0x250 [ 273.565331][T10561] ? lock_downgrade+0x830/0x830 [ 273.570181][T10561] ? vfs_write+0x397/0x730 [ 273.574698][T10561] ? lock_downgrade+0x830/0x830 [ 273.579549][T10561] ? get_pid_task+0x138/0x200 [ 273.584233][T10561] ? set_user_sigmask+0x211/0x2a0 [ 273.589259][T10561] ? __mutex_unlock_slowpath+0xe2/0x610 [ 273.594802][T10561] ? __set_current_blocked+0x110/0x110 [ 273.600258][T10561] ? wait_for_completion+0x260/0x260 [ 273.605547][T10561] __x64_sys_ppoll+0x210/0x280 [ 273.610309][T10561] ? fput_many+0x2f/0x1a0 [ 273.614642][T10561] ? __ia32_sys_poll+0x440/0x440 [ 273.619579][T10561] ? lock_is_held_type+0xbb/0xf0 [ 273.624523][T10561] ? syscall_enter_from_user_mode+0x1d/0x60 [ 273.630418][T10561] ? check_preemption_disabled+0x50/0x130 [ 273.636138][T10561] ? syscall_enter_from_user_mode+0x1d/0x60 [ 273.642035][T10561] do_syscall_64+0x2d/0x70 [ 273.646456][T10561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 273.652348][T10561] RIP: 0033:0x45de29 [ 273.656242][T10561] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.675845][T10561] RSP: 002b:00007f2d29220c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 273.684257][T10561] RAX: ffffffffffffffda RBX: 0000000000025040 RCX: 000000000045de29 [ 273.692224][T10561] RDX: 0000000000000000 RSI: 20000000000000c3 RDI: 00000000200000c0 [ 273.700198][T10561] RBP: 00007f2d29220ca0 R08: ffffffffffffff34 R09: 0000000000000000 [ 273.708167][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.716138][T10561] R13: 000000000169fb7f R14: 00007f2d292219c0 R15: 000000000118bf2c [ 273.732437][T10535] device wlan1 left promiscuous mode 19:28:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:46 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x24, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:46 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) [ 273.899733][T10539] device wlan1 entered promiscuous mode [ 274.015784][ T26] audit: type=1800 audit(1602185326.720:69): pid=10577 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:46 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x25, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:46 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) [ 274.085579][ T26] audit: type=1800 audit(1602185326.770:70): pid=10583 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000001c0)=[0x72895a1d, 0x2]) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x26, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 274.248486][ T26] audit: type=1800 audit(1602185326.960:71): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:47 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) [ 274.316944][ T26] audit: type=1800 audit(1602185327.030:72): pid=10598 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x3, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r4 = pidfd_getfd(r3, r1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) 19:28:47 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x27, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 274.523192][ T26] audit: type=1800 audit(1602185327.230:73): pid=10617 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x4, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 274.608420][ T26] audit: type=1800 audit(1602185327.270:74): pid=10620 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000001c0)='\x00', 0x1, 0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x480, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, [0x0, 0x8, 0x200, 0x5]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r6, 0x0, 0x3) getpriority(0x0, r6) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000300)={0x0, 0x5, 0x1000, 0x40, 0xc, "f59a2a740194c8f7a14031507f62a1cdee31df"}) 19:28:47 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x28, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:47 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) [ 274.750154][ T26] audit: type=1800 audit(1602185327.440:75): pid=10633 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 274.854445][ T26] audit: type=1800 audit(1602185327.490:76): pid=10636 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:47 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x29, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:47 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) 19:28:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) keyctl$assume_authority(0x10, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x4}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xd, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2a, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:47 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) 19:28:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x200, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xe, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:48 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2b, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:48 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) 19:28:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x6204) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000001c0)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2c, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:48 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) 19:28:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb4, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2d, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) 19:28:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb5, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/117) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2e, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x111) 19:28:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb6, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x2f, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x2}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:48 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) 19:28:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1000000000000000, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x3}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb7, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:49 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) 19:28:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x31, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r5, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x8}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb8, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:49 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) 19:28:49 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x32, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x10}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = msgget(0x1, 0xa8) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000280)=""/69) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) r5 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x100) write$P9_RFSYNC(r5, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r6, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f0000000300)={0x9, 0xee, 0x9, 0x0, 0xe277}) [ 276.764748][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 276.764761][ T26] audit: type=1800 audit(1602185329.470:91): pid=10800 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 276.808117][ T26] audit: type=1800 audit(1602185329.510:92): pid=10804 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:49 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) 19:28:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xb9, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 19:28:49 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x300}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 277.035691][ T26] audit: type=1800 audit(1602185329.750:93): pid=10819 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:49 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) 19:28:49 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x34, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xba, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 277.120258][ T26] audit: type=1800 audit(1602185329.790:94): pid=10824 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffffa5) 19:28:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r3, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 277.252185][ T26] audit: type=1800 audit(1602185329.960:95): pid=10838 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:50 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) 19:28:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0xbb, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 277.311492][ T26] audit: type=1800 audit(1602185330.000:96): pid=10842 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:50 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x35, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x42) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = dup2(0xffffffffffffffff, r2) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000200)={0x200, 0xff, 0x400, 0xe9, 0x3, 0x62bc}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r6 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000500)) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r9, 0xe01, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="00022bbd7000fedbdf250e0000003c0002802c000380140001800800010004000000060002002100000014000180050002000000000008000100010000800800020020000000040001003c00018014000200697036706e6c3000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f746f5f7465616d0000000c0001800800030003000000"], 0x98}, 0x1, 0x0, 0x0, 0x44080}, 0x8000) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200040, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x39, 0x0, 0x0) [ 277.483635][ T26] audit: type=1800 audit(1602185330.190:97): pid=10860 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 19:28:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x36, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x1}, {0x0, 0x5}]}, 0x18, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 277.581100][ T26] audit: type=1800 audit(1602185330.230:98): pid=10862 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:28:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x101000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x101000, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf2620000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000380)=""/164) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2809040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xa0, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 19:28:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f00000012c0)='smaps_rollup\x00') r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001200)='/proc/capi/capi20\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000001240)={0x12, 0x10, 0xfa00, {&(0x7f00000011c0), 0xffffffffffffffff, r8}}, 0x18) preadv(r7, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r9, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 3: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a, 0x0, 0x0) 19:28:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x37, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 277.799789][T10877] ------------[ cut here ]------------ [ 277.805600][ T26] audit: type=1800 audit(1602185330.510:99): pid=10880 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15763 res=0 errno=0 [ 277.839475][T10877] WARNING: CPU: 0 PID: 10877 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x85/0xa0 [ 277.874768][T10877] Kernel panic - not syncing: panic_on_warn set ... [ 277.881363][T10877] CPU: 0 PID: 10877 Comm: syz-executor.2 Not tainted 5.9.0-rc8-syzkaller #0 [ 277.890023][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.899494][ T26] audit: type=1800 audit(1602185330.530:100): pid=10882 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 277.900072][T10877] Call Trace: [ 277.922703][T10877] dump_stack+0x198/0x1fd [ 277.927035][T10877] panic+0x382/0x7fb [ 277.930941][T10877] ? __warn_printk+0xf3/0xf3 [ 277.935533][T10877] ? printk+0xba/0xed [ 277.939515][T10877] ? log_store.cold+0x16/0x16 [ 277.944188][T10877] ? __warn.cold+0x5/0x4b [ 277.948513][T10877] ? __warn+0xd6/0x1f2 [ 277.952586][T10877] ? vkms_gem_free_object+0x85/0xa0 [ 277.957784][T10877] __warn.cold+0x20/0x4b [ 277.962030][T10877] ? vkms_gem_free_object+0x85/0xa0 [ 277.967232][T10877] report_bug+0x1bd/0x210 19:28:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) 19:28:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x2000000000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4100, 0x1004}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 277.971564][T10877] handle_bug+0x38/0x90 [ 277.975718][T10877] exc_invalid_op+0x14/0x40 [ 277.980220][T10877] asm_exc_invalid_op+0x12/0x20 [ 277.985068][T10877] RIP: 0010:vkms_gem_free_object+0x85/0xa0 [ 277.990868][T10877] Code: 00 75 2b e8 cd 71 e7 fc 48 8d bd 30 02 00 00 e8 21 06 cc fc 48 89 ef e8 f9 13 a4 ff 48 89 ef 5d e9 a0 d0 27 fd e8 ab 71 e7 fc <0f> 0b eb a8 e8 a2 71 e7 fc 0f 0b eb cc e8 29 49 28 fd eb bb e8 22 [ 278.010467][T10877] RSP: 0018:ffffc9000844fc08 EFLAGS: 00010293 [ 278.016527][T10877] RAX: 0000000000000000 RBX: ffffffff848ecce0 RCX: ffffffff843304c8 [ 278.024589][T10877] RDX: ffff8880914b8140 RSI: ffffffff848ecd65 RDI: ffff88808fa2cac0 [ 278.032557][T10877] RBP: ffff88808fa2c800 R08: 0000000000000001 R09: ffff88808fa2c803 [ 278.040527][T10877] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888218760c28 [ 278.048496][T10877] R13: ffff88808fa2c808 R14: ffff88808fa2c928 R15: ffff888092e72800 [ 278.056483][T10877] ? __vkms_gem_create+0xf0/0xf0 [ 278.061504][T10877] ? drm_gem_object_handle_put_unlocked+0x1d8/0x420 [ 278.068093][T10877] ? vkms_gem_free_object+0x85/0xa0 19:28:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='net/sockstat6\x00') preadv(r6, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r7, 0x7000002}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x4a}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 278.073293][T10877] ? vkms_gem_free_object+0x85/0xa0 [ 278.078492][T10877] drm_gem_object_handle_put_unlocked+0x3ac/0x420 [ 278.084903][T10877] drm_gem_object_release_handle+0xf9/0x1b0 [ 278.090794][T10877] ? drm_gem_object_handle_put_unlocked+0x420/0x420 [ 278.097381][T10877] idr_for_each+0x113/0x220 [ 278.101885][T10877] ? idr_find+0x50/0x50 [ 278.106053][T10877] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 278.111856][T10877] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 278.117848][T10877] drm_gem_release+0x22/0x30 19:28:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8, 0x6, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, "196624e919eca89959300f4c98ba0c398293e624f2fbf800"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={0x0, 0x7000002}) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000c3, 0x0, 0x0, 0xffffffffffffff34) [ 278.122438][T10877] drm_file_free.part.0+0x866/0xcb0 [ 278.127643][T10877] ? fsnotify+0x1040/0x1040 [ 278.132155][T10877] drm_close_helper.isra.0+0x17d/0x1f0 [ 278.137627][T10877] drm_release+0x1e6/0x530 [ 278.142051][T10877] __fput+0x285/0x920 [ 278.146044][T10877] ? drm_release_noglobal+0x180/0x180 [ 278.151419][T10877] task_work_run+0xdd/0x190 [ 278.155930][T10877] exit_to_user_mode_prepare+0x1e1/0x200 [ 278.161566][T10877] syscall_exit_to_user_mode+0x7e/0x2e0 [ 278.167132][T10877] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.173020][T10877] RIP: 0033:0x417781 [ 278.176916][T10877] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 278.196512][T10877] RSP: 002b:000000000169fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 278.204926][T10877] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417781 [ 278.212981][T10877] RDX: 0000000000000000 RSI: 0000000000001509 RDI: 0000000000000003 19:28:50 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x38, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 278.220948][T10877] RBP: 0000000000000001 R08: 000000004b1df509 R09: 000000004b1df50d [ 278.229002][T10877] R10: 000000000169fcd0 R11: 0000000000000293 R12: ffffffffffffffff [ 278.236964][T10877] R13: 0000000000043d37 R14: 00000000000003e8 R15: 000000000118bf2c [ 278.246222][T10877] Kernel Offset: disabled [ 278.250542][T10877] Rebooting in 86400 seconds..