0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events9', 0x2da8020000100000, 0x500001c) 18:18:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8100, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@host}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x80000007, 0x0, 0x0, 0x0) 18:18:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events:', 0x2da8020000100000, 0x500001c) 18:18:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) 18:18:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x4b643583, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180fa364", @ANYRES16=r2, @ANYBLOB="000325bd7000fbdbdf2503000000080006000400000040000200080007000000000014000100ac141424000000000000000000000000080008004bc2000008000b000a000000080002004e230000080006002137000008000500aa45d67f"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x20000011) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000691028000000ea008000000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x100, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)='nr0\x00', 0x73, 0x9, 0x5}) 18:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x26}}}], 0xffffff76) [ 1616.980831][ T26] audit: type=1804 audit(1555611487.653:4483): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1885/memory.events" dev="sda1" ino=17085 res=1 18:18:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x6, 0x10000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)={0xc021, 0x3}) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/143, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x70}}}], 0xffffff76) [ 1617.564268][ T26] audit: type=1804 audit(1555611488.233:4484): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1885/memory.events" dev="sda1" ino=17085 res=1 18:18:08 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events;', 0x2da8020000100000, 0x500001c) 18:18:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000001c0)) 18:18:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x80000008, 0x0, 0x0, 0x0) 18:18:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xb2}}}], 0xffffff76) 18:18:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xbf}}}], 0xffffff76) 18:18:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000200)='./file0\x00', 0x100) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000e000000000001438999400"/24], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events<', 0x2da8020000100000, 0x500001c) [ 1618.102068][ T26] audit: type=1804 audit(1555611488.773:4485): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1886/memory.events" dev="sda1" ino=17087 res=1 18:18:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000680)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000006c0), &(0x7f0000000740)=0x10) sendmsg$nl_crypto(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@alg={0xe8, 0x10, 0x600, 0x70bd2d, 0x25dfdbfe, {{'ctr(aes)\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="08002abdd044a47000fddbdf25080000004c00030008000500ac1414bb14000200726f736530000000000000000000000014000600ff02000000000000000000000000acb8080007004e230000080005007f000015080004000600000014000104004e20000008000400080000005000010008000b00736970000c000700020000000400000014000300ac1414aa00000000000000000000000008000b007369700008000800e90000000c000700040000000000000008000200ff00"/198], 0xcc}}, 0x8000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0xd1b0, &(0x7f0000ffa000/0x3000)=nil, 0x1) write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000580)=""/132) 18:18:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events=', 0x2da8020000100000, 0x500001c) [ 1618.660896][ T26] audit: type=1804 audit(1555611489.333:4486): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1886/memory.events" dev="sda1" ino=17087 res=1 18:18:09 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000240)) 18:18:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x80000019, 0x0, 0x0, 0x0) 18:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1f4}}}], 0xffffff76) 18:18:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events>', 0x2da8020000100000, 0x500001c) 18:18:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventsH', 0x2da8020000100000, 0x500001c) 18:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x500}}}], 0xffffff76) 18:18:09 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$rose(r0, 0x104, 0x3e7638e85cb85856, &(0x7f00000002c0)=0x3, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000001300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff5c0000000000019078ac2314bbac1414110504907800000000400000000000549c1e00005c110000ac2314aaac141400082c00000000000000000000e000000200000000e000000100000000000026332788eeda0e00007f000001000000000000"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000250}, 0xc, &(0x7f0000001740)={&(0x7f00000013c0)={0x344, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd87}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x12c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x572}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff1f4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffe01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) inotify_init1(0x80000) ioctl(r1, 0x6, &(0x7f0000000280)="0adc1f123c123f319bd070") recvfrom$inet(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x1, 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0500309c1c5191bc3f78f8ffffff0000000e0000005300c2b98daddaf34a173c86288ed68e1093e7cdad65601b9be559b1ccc3fc550fe6f5c0af1c3ad57e816a2fea9335541f1b0782804b2bd3e6ba0bd2f866e0a3816f3d5b74c50b01eef033aa9fb8c58ee81145e03db10bef143c430b2d5547"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) [ 1619.124928][ T26] audit: type=1804 audit(1555611489.793:4487): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1887/memory.events" dev="sda1" ino=17106 res=1 18:18:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xb9a, &(0x7f0000000100)="7496d9fae50d6c91c4c10d8bcb67a98b49d32327af329b9794bd91dec667e6004e2ad3d1e372a6c65076a852f7660399b8c15bff1a9f53495a1d68cadb6dbc56a15c5b90a6280e35751c2423dfbe738a776dc1829ecb78c638b4b68bcc0b1748fd17a79f011fe8c43d7c3a17da1addf5d6794d082b5d6dfeb5f841e55f09b321720fdd0d0c9779863d8aa944e536a92768e35064a911bcd5767a88a4734e") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x900, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r5}, 0x10) getsockname$llc(r5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000480)=0x10) 18:18:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x70) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000002c0)) 18:18:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x6, 0x4, 0x35, 0x100, &(0x7f0000000100)=[{}, {}, {}, {}]}) [ 1619.770363][ T26] audit: type=1804 audit(1555611490.443:4488): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1887/memory.events" dev="sda1" ino=17106 res=1 18:18:10 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1e00}}}], 0xffffff76) 18:18:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) 18:18:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventsL', 0x2da8020000100000, 0x500001c) 18:18:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000003c0)="05001f620b18b57e0a21") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000380)={0x0, 0x9a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000e4000069062800000000009500000001000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) ioctl(r2, 0x0, &(0x7f0000000280)="53b08dff9f15ae055dd279e0a1eee808cf763a27f5cdab5ffb4ccc78a97cd6a841be7068238574366c77e0798459dd9d8e2c7dc05efbea46966c9fc20f7950f49440d9b7ad9b3bcccf81bd93d8976d63eb5f8ca6d99caaf8465fe0c40e731d323d310f6e2e847995b7c5d23e73dcec9d4d970dbf6c148ee61eb182344f375dcec2aef36fc56f2581558012ae1cddf1cb3581934623b1b5b7df89023b2a370f85fbc240fce35a78bec052") getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/44, &(0x7f0000000240)=0x2c) 18:18:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a703a434e9276cecb1101b46dc6fc911788000000000001") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r0, r1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="b6bdd74a6662bd713290e41b3bed32f66aea0f85273abb58008ba8efa48bf89c5fabfa1818737d2a1b372db21d59", 0x2e}, {&(0x7f0000000140)="c2010c6c1ef6d98f55a40c267fc0c98fb899d3f7d9f6fc24fdcaf5e404708ab248d3fb354ef269021e85d7baf3850893967d079be754d4b1d9b7288e29cd1a41eb48303726661fac844276dedeb736deecae91a20e8799e3030d325d7d389a35b17da19b668c5c11702afd40b7a83a0a4276b3993a1125", 0x77}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f00000001c0)="2dcfbf672b6311688f10b1650d884f8c0fd0ca5e65dc9193634d9c25f68ed8ec150e12c66267", 0x26}, {&(0x7f00000002c0)="5e4c7bee86f7629f159e0a700e3ee99fc42a740f732cbe84f61a334a5ab73357688bfa3f73fe8241530f384a214bf4bd9d8dfd83ae496a9ee5e23d0af069a894638346c34282be45d260b3bc31edd03f92cb0a32876a750db2a93ed874b1dabc0537fac8da2c6567a20bc2067ee43e06a4e7a04e2073a85a", 0x78}], 0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1620.178114][ T8840] IPVS: length: 44 != 24 [ 1620.213002][ T8851] IPVS: length: 44 != 24 18:18:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000080)=0x7) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x0, 0x2, [0x7, 0x7]}, &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f00000005c0)='{\x00'}, 0x30) r8 = getuid() r9 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000640)='\x00'}, 0x30) r11 = geteuid() getresgid(&(0x7f00000006c0), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r13 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000008c0)=0xe8) r15 = getegid() sendmsg$unix(r3, &(0x7f00000009c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="eb215bb11abc4a4a4a419758c36d6198eb0309b8430d8a774dee4c076333f83d492683ebed0843ac71f4365feb57d7cd23e2893fb75d443607fdf9950513bda580a4d573837db320", 0x48}, {&(0x7f00000003c0)="d07b726f85e73c76d074cf1443571d939ba56f16c27e8a174f8274ff16b3d8537d83f037", 0x24}, {&(0x7f0000000400)="6e2b42b41233271bba3d0c6fad41079a41b50d45eb62c0e525c846b42c9b9cfe360d7d7c9aae5593322fcaa1db0ef95dba1e6c29b0e435982e76157c95029f0341f557445493373ea426372ad23b45062903e18483d4526603903ff917e22bb04e5b9b00da0c8411700d20c0f25b33e44395c6f7dacdef606df4153b54912214c76d9b3a7f8d139ca496a8464272e86c8b93af4d670e35b17a98cf57ac5241beffd126df5a3ae5cfe05502eb52c667545eb74c4d1d0bd4f0466daa60a2c9101b8929f3", 0xc3}, {&(0x7f0000000500)="206f9a99f3721d6d99c009b70e77c47099186689a6b778ca2ed031e5444edc19fc2567871d18986514c0288cde869676ab20740cf9f1ea044876ecb764207e6f24f2c2f242ae644683e281f2215de85d8dde4e11a6976aedb5051d8209", 0x5d}], 0x4, &(0x7f0000000900)=[@rights={0x28, 0x1, 0x1, [r2, r5, r3, r2, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r3, r3]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xa8, 0x44844}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x0, 0x6}, &(0x7f00000001c0)=0x8) 18:18:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventsh', 0x2da8020000100000, 0x500001c) [ 1620.259898][ T26] audit: type=1804 audit(1555611490.923:4489): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1888/memory.events" dev="sda1" ino=17106 res=1 18:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1f00}}}], 0xffffff76) 18:18:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="711fdc3721202e05"], 0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xa351, 0xe52, 0xd81a, 0xb9, 0x21}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x2, [0x1, 0x43d2]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000480)={r4, 0x1000000000000, 0xa7, 0xfb64, 0x5e, 0x1, 0x0, 0x7f, {r5, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x1b}, 0x800}}, 0x0, 0x2, 0x9, 0x5, 0x43}}, &(0x7f0000000540)=0xb0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r6 = memfd_create(&(0x7f0000000080)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r7 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x40000) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2000}}}], 0xffffff76) [ 1620.852208][ T26] audit: type=1804 audit(1555611491.523:4490): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1888/memory.events" dev="sda1" ino=17106 res=1 18:18:11 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventsl', 0x2da8020000100000, 0x500001c) 18:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001d, 0x0, 0x0, 0x0) 18:18:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x800066, &(0x7f00000002c0)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00') stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000640)='./file0\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x410000, 0x0) mknod$loop(&(0x7f0000000600)='./file0\x00', 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000540), &(0x7f0000000580)=0x4) setregid(r1, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2100}}}], 0xffffff76) 18:18:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r1) connect$ax25(r2, &(0x7f0000000040)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default, @default, @null, @default]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) 18:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2200}}}], 0xffffff76) [ 1621.333112][ T26] audit: type=1804 audit(1555611492.003:4491): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1889/memory.events" dev="sda1" ino=17120 res=1 18:18:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventst', 0x2da8020000100000, 0x500001c) 18:18:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000200)="8157223e7552527e2708036eb2b0431bb7297ffe34f9cc60a05a99a6bea090442094b437859bd3a72131eaaded2a12bf9cd21c2b744df6fec297ab57c5fddc495c67e688f502ee0dcaa6f477f4eabea1b3aae562903b447f000b5e908e72c31c217656e4e12c4daf0c08acdf017e37400bb3833d53c78106a4cfcbf139dddf74d33cdeb96e24816f6f5867ea1c246b82fbdd1a22502f813cc76697d91a35a988a136e0bc975d") ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2300}}}], 0xffffff76) [ 1622.008572][ T26] audit: type=1804 audit(1555611492.683:4492): pid=8930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1889/memory.events" dev="sda1" ino=17120 res=1 18:18:13 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\xff', 0x2da8020000100000, 0x500001c) 18:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xc0000000, 0x0, 0x0, 0x0) 18:18:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.eventsz', 0x2da8020000100000, 0x500001c) 18:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2600}}}], 0xffffff76) 18:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000069103800000000009500eb42f1ed7da8"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x0, 0x0, [{r3, 0x0, 0x2}]}) 18:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x313b}}}], 0xffffff76) 18:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e20, 0x8, @empty, 0x7}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @loopback}], 0x6c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x0, 0x1, 0x7, 0xb, 0xf, 0x6, 0xffffffffffffffff}, @exit, @exit]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$KIOCSOUND(r1, 0x4b2f, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x704, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) 18:18:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}, {0x20, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}, {0x20, 'wlan1}'}, {0x20, 'vmnet0ppp0--'}, {0x20, '/dev/media#\x00'}, {0x20, 'lo'}, {0x20, '/dev/snd/seq\x00'}, {0x20, 'cgroupppp1'}], 0xa, "9a26781e70a38bd282e7fe631ee2475b0f7e460054d72540f0e0d98be3c362d4b5a6fd164bb083424739bbacdd7349feebf830fb2659f1abf5d9edd568cf7cee9fb03a180afecdd3acb2a5daf2bac1fc6f1bf38fce71ef3b419673c0ec393179a83d1d1d8a271ee8bd5c677ce856d8dcfc92bda1e661b4e55beeaaf6bebfacf2d4116c0f42b5e0a940b21e2c6ceee8dc1e0a8e63fc6b39fb21b01a3b37b61b406aa3ae384aec705cae4d054fd13fe8c3a717c7215b"}, 0x163) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000080)) r4 = dup2(r3, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:13 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x100fff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x4, 0x3, 0x80, 0x8}, {0x38, 0x1000000, 0x10001, 0x153d8e0a}]}, 0x10) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x80000001, 0x5, 0x3, 0x7}, 0x8) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x9) memfd_create(&(0x7f0000000080)='/dev/snd/seq\x00', 0x7) 18:18:13 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000062000, 0x500001c) 18:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x7000}}}], 0xffffff76) [ 1622.663612][ T26] audit: type=1804 audit(1555611493.333:4493): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2311/memory.events" dev="sda1" ino=17249 res=1 18:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xc0000001, 0x0, 0x0, 0x0) 18:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x400001, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x7}, 0x10}, 0x70) [ 1622.832553][ T26] audit: type=1804 audit(1555611493.493:4494): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1891/memory.events" dev="sda1" ino=17128 res=1 18:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xb200}}}], 0xffffff76) 18:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000169102800000101000000000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) clock_gettime(0x0, &(0x7f0000005d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x4}}, {{&(0x7f0000000600)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/84, 0x54}, {&(0x7f0000002940)=""/145, 0x91}], 0x8}, 0x10000000000000}, {{&(0x7f0000002a80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b00)=""/54, 0x36}, {&(0x7f0000002b40)=""/36, 0x24}, {&(0x7f0000002b80)=""/223, 0xdf}, {&(0x7f0000002c80)=""/167, 0xa7}, {&(0x7f0000002d40)=""/63, 0x3f}, {&(0x7f0000002d80)}], 0x6, &(0x7f0000002e40)=""/234, 0xea}, 0x2}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f40)=""/145, 0x91}, {&(0x7f0000003000)=""/75, 0x4b}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/203, 0xcb}], 0x4, &(0x7f0000003240)=""/99, 0x63}, 0x4}, {{&(0x7f00000032c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000003340)=""/41, 0x29}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/121, 0x79}, {&(0x7f0000004400)=""/4, 0x4}, {&(0x7f0000004440)=""/124, 0x7c}, {&(0x7f00000044c0)=""/13, 0xd}, {&(0x7f0000004500)=""/197, 0xc5}, {&(0x7f0000004600)=""/197, 0xc5}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x9, &(0x7f00000057c0)=""/19, 0x13}, 0x9}, {{&(0x7f0000005800)=@hci, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005880)=""/81, 0x51}, {&(0x7f0000005900)=""/74, 0x4a}, {&(0x7f0000005980)=""/212, 0xd4}, {&(0x7f0000005a80)}], 0x4, &(0x7f0000005b00)=""/217, 0xd9}, 0x1}], 0x6, 0x40000000, &(0x7f0000005dc0)={r2, r3+10000000}) sendmsg$nl_route_sched(r0, &(0x7f0000006600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000065c0)={&(0x7f0000005e00)=@newtaction={0x78c, 0x30, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{0x78, 0x1, @m_mirred={0x74, 0x13, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8, 0xffffffffffffffff, 0x3, 0x1000}, 0x7, r4}}}, {0x3c, 0x6, "91d9d6692bb3ce717cccce7e34ebc3192a26b46dd50b0fc3b85d0078f830a639aea64f2e7ad639a1f130fce0637dbd477221bcce2d68"}}}}, {0x134, 0x1, @m_bpf={0x130, 0x1, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9e9, 0xb644, 0x3, 0x1f, 0x6}}]}, {0xfc, 0x6, "6ca6f084a9c43ba195756eed555efd4091869b1e03ea9874a49aa6f2b7d051341e096067275306912d8e259b4f7843bba8d1b25592e6abe5644045b2306739e098acf6644f98a49132f9b9856721033eda1e3457ad656dcc09d59236bc122eeb03c5e580b3eccaf516544eb8da56f90dfbea05bef26f87d8de49eb2cc924fd133728beed806fd86332f50b9d12604f51251947cefbb8b3d3be3000d71b6eb26229980bafc76c5a7194bca787b80652dbd21f185ef189ad87e878369f287bbe8cb8367da70b36ed7d6bc102225d03bb8779a219fb46063a1e5bc02c6c59a4d404072bb2a73eb6835d3070a10915873e1ad98d0cf9a1bd"}}}}, {0x118, 0x1, @m_connmark={0x114, 0x17, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffffffffff60c, 0x7, 0x3ff, 0x80000000}, 0xfffffffffffffffa}}}, {0xdc, 0x6, "f5eee5038d924dc638b034583324970c368b3509a781759b70adf833246ba0ca6e41c38b407b216b6ec8a9809920d1e34579b7826de4b476c74f47edb11ff7fd2113352365b52013f86fbce5bb7d9b2609e3508512067a14afda0b1c667363c6d1df49bc834b0ee946cc3ef76d93049bf406c056c525a5285bf09ef8ef5efb19c1419c2f78a08a12f6f0eea2d88bd3b724fe362272bcfca357247f2624bf4fba1baec11616a3755ca0ff63869159dd7eb621db9c74ea97069e7376842d06fb1add3590c30d4d9ae41200a9c8585c20456267017be07eb3"}}}}, {0x64, 0x1, @m_csum={0x60, 0x1a, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x20000000, 0x3730, 0x6}, 0x68}}}, {0x2c, 0x6, "ea06d8713f736b888fb26151b1e8edb4c03bae45d887d6fe52a1313783bc69463b97ddb7ef6fdd32"}}}}, {0x134, 0x1, @m_connmark={0x130, 0x1, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x7, 0xffffffffffffffff, 0xf, 0x2}, 0x100000001}}}, {0xf8, 0x6, "b6ea3f1d59d7e438c20ec8b52e7fa0fe55c123e661309e031159c80716917a23bc2ca7963d308d9011253694ad8b2778c8637f468f474c5e5d2b05ef53775941a68b8ed7dc70a18ea280ea0c73b610786bcaf88e5de37196ac982d0307da8a3a13b6ac845fece4f569bc1074c2bfeefdc33cbc1fe642713de1d9b94ade0cac31bfafc47c1eaf7034b2cdb50209eeb9813259851201a9fb6375a8da55efdfc3458f7ad803e2a6abf1dea003bf4f5857b7a5fd7c09c7799bd08be373ceb998818fdadd786a2613c74636bf82228af6c9487ac81f6693cfa01092265ff45f85c6855933f2d6cdcddc01ec0a5e101ebfc560d86d4ff0"}}}}, {0x10c, 0x1, @m_simple={0x108, 0xe, {{0xc, 0x1, 'simple\x00'}, {0x84, 0x2, [@TCA_DEF_DATA={0x8, 0x3, '!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x100000001, 0x2, 0x20, 0xffffffffffffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd368, 0x9, 0xffffffffffffffff, 0x20, 0x20}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xd79, 0x2, 0x6, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xfff, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1000, 0x20000002, 0x3, 0x5}}]}, {0x70, 0x6, "c088fb0869f2b4382b60767ed5b1aa9128cebbb22fc4881605f666baeb1ad866683704cf5c57259aeccc424fab9cf0804ba7a1cba5c1a85f7da5cf2abfef7913ef6b23677b21e92406d648fb6db16a706d98c1026fdea08f2955b4a52599f17688bdfe99ea57930ad2a93b"}}}}, {0xbc, 0x1, @m_gact={0xb8, 0x19, {{0xc, 0x1, 'gact\x00'}, {0x64, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x0, 0x2, 0x3ec90f22, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x80, 0x0, 0xffffffff80000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x672}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x104c, 0xf}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x6, 0x6, 0x8}}]}, {0x40, 0x6, "aa4fe76b9d30995fa25c914d77223226f40a3d8ffa3eeaed72414f2ad84aa982250d4e2a7cf376666b49a4cc4077630e8d03be7b53e033cb63a1"}}}}, {0x154, 0x1, @m_vlan={0x150, 0x12, {{0xc, 0x1, 'vlan\x00'}, {0x4c, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x20, 0x2000000f, 0x200, 0x401}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xe45}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd1, 0x401, 0x20000000, 0x0, 0x1}, 0x3}}]}, {0xf0, 0x6, "69c69bdf273b62f8d4721b045faba6946d0986810be58098c88fb4e562a048ea3361ac2938cb3a2edcdf41a0c4c9780bae4c02c239b7c2e5adec9ad74513e6701d88a9c9c286937fa87bb12763897e70dfb392ae111b91288fdf82c9bc73466af0741f6b0f0ae7456f5741213707cc462372bd2c429e5ed4f875fc4a6108e0e58f9b67be8ca2f1c1a3ed7594ea47570f655050b2e45c483d44512c77f406c1d35f345f974cb94afc89d6e8b8eebdee808fc17887071ae032d01ec457a572f705336a9c8b7c15b9896265c1c283157fd7ad39586a3625a3a7cdb17f2d87e3d1b657395406de532b11dbe22883"}}}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 18:18:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xbf00}}}], 0xffffff76) 18:18:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x101, 0x400000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) sendmsg$xdp(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x2c, 0x2, r2, 0x24}, 0x10, &(0x7f0000000580)=[{&(0x7f00000003c0)="94473e54771ad9ac6e01beade6f659c815137fcce21bc31c4722e191c178f7cf7019eb852211ad8924f553e80d3e25ff7b981a67fb156b13b027f73da1ff982fc62f2f9bf92f7587dd5c7722d0e44953bb3a1cb73d405a6973bf0ed0575238aeb3944d340631277a693e8d4877db7c779b558a82b88962883fd19961c4b714aeaf3cae93a0f5bc016e03f218fd6431b5dfa8c8b51bdbfb20fd4a3dfffb05957d4162b8149a5d7b6370fac77d1180d79040c21bdb4270e729c910a7cd7c4823e5c4", 0xc1}, {&(0x7f00000004c0)="b776fe96263aef1c187315b4db24ddf90c5e86a0feac6ea9234df4026d71635dd66eba92190dc12b826f43d1774d54d22f367d7735c249e568a5c1474c36cbe9a042bb4b6c634df21902f9a8238d1cb1707b7a8552036ec83467013e49aedc0e80c87d63643156433eeab0c3099ef5cbc6c2d576012fa3a0ebd078dcc261460602d25a7ffa21457fe76bc11fc346d8aa4d2193ff054d3c2bb57ff664e5e3cafc3907fcceafdeb082efc3614296f803a57628682e46af61ff05a41d", 0xbb}], 0x2, 0x0, 0x0, 0x40041}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000000000069102800000000008100000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 18:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xf401}}}], 0xffffff76) 18:18:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xebffffff, 0x0, 0x0, 0x0) [ 1623.566239][ T26] audit: type=1804 audit(1555611494.233:4495): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2312/memory.events" dev="sda1" ino=17124 res=1 [ 1623.745399][ T26] audit: type=1804 audit(1555611494.413:4496): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1891/memory.events" dev="sda1" ino=17128 res=1 18:18:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x3, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:14 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100002, 0x500001c) 18:18:14 executing program 2: 18:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x700000}}}], 0xffffff76) 18:18:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000080)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfcfdffff, 0x0, 0x0, 0x0) 18:18:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:14 executing program 2: 18:18:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl(r1, 0x3, &(0x7f0000000040)="5b7eff0b0e021072f91e96ef495ffd") write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:15 executing program 2: [ 1624.377167][ T26] audit: type=1804 audit(1555611495.043:4497): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2313/memory.events" dev="sda1" ino=17233 res=1 18:18:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:15 executing program 2: 18:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1000000}}}], 0xffffff76) 18:18:15 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100003, 0x500001c) 18:18:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0) 18:18:15 executing program 2: 18:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x4000000}}}], 0xffffff76) 18:18:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="72d6d5cb00000000000070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000380)) write$sndseq(r1, &(0x7f0000000500)=[{0x6, 0x0, 0x3, 0x4, @tick=0x1f, {0x6, 0x280000000000000}, {0x3f, 0x1}, @result={0xfff, 0x8000}}], 0x30) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40200) timer_create(0x7, &(0x7f0000000080)={0x0, 0x31, 0x6, @thr={&(0x7f0000000100)="9ddc429315c47b4005a66c47a9ecac607b7e1b8fd7f66b09873e9f78193c02fa13e011b3b3959e0fa7a714a71e73912df769594bc97fea18d667a19c698ddc330e4be7c98b160a930298785d1f2a73b770b9f4df54dad3602c0e18", &(0x7f00000002c0)="0267730b057181027f984190780eec77f0458c6c962943f6345b594c5415ed7d41fa8327f38870d9a5d9b5f4dff9c4aa6804c8ad3f46bfa8b793ab8c7bea322fa1ee5284d17d0bebe9192e4149d9a751f1f2bff747338a1b373cb379717de5aa257172746b3d64143d6439b753330005147290f2060bce158f300437205aac6564fdead9c009e001410e7aa2b9d22d6fa4af558d6091"}}, &(0x7f0000000180)=0x0) timer_gettime(r4, &(0x7f00000001c0)) 18:18:15 executing program 2: 18:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x5000000}}}], 0xffffff76) [ 1625.287992][ T26] audit: type=1804 audit(1555611495.963:4498): pid=9067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2314/memory.events" dev="sda1" ino=17077 res=1 18:18:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="cc181c6860000adc2ab42a62763071b6b84eda16f1ba4c3958f7a334689646c1b657efed145d22b543a0b2a828f2820ebcef91383f1d3975b43248e9d91f64fb1f541bd0bd90dc90332b265d2c4e42edf2cfb341c443dc086ae9951bcdb843c9601fc5c0e02543bbaa3d37b0f2d921912c29fb8a51b3798b1d512ce40a2745bba3b2f7faa8db5f9aa80ada12df8fefea374f5d7f4d7de495b430084b38233e646cbb719956aa61a40c1ce103ca1fa1d7c696c14448e49a54a0962b6e20c2858eb90f651579") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)=0x101, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1625.423797][ T26] audit: type=1804 audit(1555611495.993:4499): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1893/memory.events" dev="sda1" ino=17081 res=1 18:18:16 executing program 2: 18:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x8000000}}}], 0xffffff76) 18:18:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x101400) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1625.941831][ T26] audit: type=1804 audit(1555611496.613:4500): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2314/memory.events" dev="sda1" ino=17077 res=1 [ 1626.002084][ T26] audit: type=1804 audit(1555611496.673:4501): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1893/memory.events" dev="sda1" ino=17081 res=1 18:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xff600000, 0x0, 0x0, 0x0) 18:18:17 executing program 2: 18:18:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000100)="0800000000e0ffffffe6e19277f9979942267a1c6f05dd32fcade8d788ac9c5b61fb97b1a6ce16279e02b7f895856068529e82157556c0f78ae6212d6325c1e22ac6bc4dd1c69a05673f173daf0a0dae2bfa360e8b9a7eede3a560ae30f5041c321e883d4b09ffd69ece1dcced65a64620a153f7f95f345084e2c6b6e01768ca1309985070a045c39e0d0cbd4aff224a7fc065ba0b4351067ffca7582cbbb1404cad284d33f00db7ca44dd1b4fea7dfe5cf00a329bd012872a18e0399b1d92fa1e2d9df2db7a68c5edcef09ebe46fbd55280fbb9181c5c6dea") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x11, 0x9, 0x17, 0x8, 0x5, 0x6, 0x1, 0x90, 0xffffffffffffffff}) 18:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1e000000}}}], 0xffffff76) 18:18:17 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100004, 0x500001c) 18:18:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:17 executing program 2: [ 1626.457643][ T26] audit: type=1804 audit(1555611497.133:4502): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2315/memory.events" dev="sda1" ino=17489 res=1 18:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1f000000}}}], 0xffffff76) [ 1626.572071][ T26] audit: type=1804 audit(1555611497.243:4503): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1894/memory.events" dev="sda1" ino=17130 res=1 18:18:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="bfa689cec57ea1c852b45e5e30e05b8606754834e352bebbf9e7732ef3e8475432e7f0f0cf508b33641fa3a7683630ac068073f0d52a60edc9c575fcfcd9f72ffb47c877b75abfabbfa423de695b96408678addbc04429adb2a32b837fd5b288445b1aca4d9f2f157495c2577b7444e36862c9c5125ca2f1ba442e36bb2c59a10a74dd94336198b090a05d0af0d50cb8d2ef9eb19786a543d64042316143abd0cf17672bdf608a620d48c86717", 0xad, 0xfffffffffffffffa) keyctl$revoke(0x3, r3) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f00000001c0)={0x90f2, 0x2987, 0xfff, 0x1f, 0x3, 0x7}) 18:18:17 executing program 2: 18:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x20000000}}}], 0xffffff76) 18:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffff8000, 0x0, 0x0, 0x0) 18:18:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) sendto$unix(r3, &(0x7f0000000400)="2ec38ef9039b856bceb3b60c9b02c56c977bb81f3a62fa05b6e3b7ddaf7ae987c52468cbabd09e02af484b9edc6c71b314ff7fc4bfa0948b6e9abe0618b3ec68832533e214d2df9faf52eb0ade78d155ebe094c7f6d59905b0efe901ad3c29fc859f63435bd313cf7400ebf9de2322304f2885714500e326624d65e2db1abcec423064d7636ec21437e7cb8269c8f1e30f7f5aa3e1a2c8c893222b2c413c1ceb3cb6c7a0013f3191618b", 0xaa, 0x4000, 0x0, 0x0) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000001c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=@deltclass={0x10b0, 0x29, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, r5, {0x0, 0xfffd}, {0xfff2, 0x7}, {0xf}}, [@TCA_RATE={0x8, 0x5, {0x6, 0x9}}, @TCA_RATE={0x8, 0x5, {0xffff, 0x100000000}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x9, 0xffff, 0x5, 0x175, 0x1ff, 0x2, 0x25, 0x4, 0x98c, 0x7, 0x3, 0x800, 0x7, 0x0, 0x8001, 0x5, 0x100000000, 0xc42, 0xff, 0x7, 0x8, 0x7c, 0xa28, 0x3f, 0x9, 0x401, 0x5b02, 0x7, 0x6, 0x7a94, 0x800, 0x2, 0x6, 0x0, 0x9, 0x7, 0x0, 0xd3, 0x6, 0x4, 0xef, 0x1ff, 0x4636, 0x100000000, 0x7ff, 0x1000, 0x6, 0x8000, 0x1, 0x7, 0x543a, 0x79, 0x6, 0x9, 0x9, 0x8001, 0x72, 0x9b8c, 0x101, 0x80, 0x7, 0x8001, 0x9, 0x6, 0xfffffffffffffffa, 0x5b23, 0x22, 0x2, 0x8, 0x200, 0x1ff, 0x8001, 0x5, 0xf51c, 0xffffffff, 0x615f, 0xfff, 0x3, 0x7, 0x1, 0x1, 0x101, 0x7c727b6c, 0x1000, 0x35b8, 0x8001, 0xd2, 0x6, 0x1, 0x3, 0x0, 0x6, 0x10000, 0x100000001, 0x803, 0x9, 0x7fff, 0x9, 0xffff, 0x100000001, 0x0, 0xffff, 0x7, 0x6, 0x1, 0xf830, 0x4, 0x4, 0xad, 0x0, 0x1, 0x7, 0x3, 0x7fffffff, 0x5a, 0x401, 0x2, 0x1, 0xffffffff, 0x3f, 0x4, 0xf2, 0x7fff, 0x6, 0x1, 0x8001, 0x80000001, 0x8, 0x3, 0x4, 0x4, 0x7, 0x5, 0x5, 0x8, 0x200, 0x2, 0x74d4, 0x4, 0x2400000, 0x200, 0xd0, 0x200, 0x400, 0x3, 0x3, 0x5, 0x4, 0x80000001, 0x6f, 0x1000, 0x2, 0x0, 0x6, 0x65, 0x0, 0x1, 0xffff, 0xfff, 0x91, 0xb3d7, 0x9, 0x5f, 0x6, 0x2d26, 0x18, 0x1, 0x5fbd, 0x1, 0xf0b6, 0xfffffffffffffe46, 0x9, 0x7, 0x10000, 0x4, 0x3, 0x5, 0x1, 0x1f, 0xd97a, 0x7, 0x2, 0x4, 0x6, 0x34, 0x6, 0x0, 0x8, 0xffffffff, 0xa6c0000000000000, 0x1000, 0x4, 0x784, 0xfffffffffffff001, 0x10001, 0xfffffffffffffffd, 0x1400, 0x40, 0x6, 0xfff, 0x3ff, 0x4, 0x0, 0x1, 0x1, 0x1, 0x80000001, 0xff, 0x3, 0x1, 0xfffffffffffffff9, 0x1e1a, 0x400, 0x7ff, 0x101, 0x2, 0x9, 0x7, 0x8, 0x2, 0x9, 0xfffffffffffffffa, 0x8e1c, 0x6d, 0xd9e, 0x81, 0x7fffffff, 0x1, 0x2, 0xff, 0x1ff, 0x9, 0x5, 0x7ff, 0x4, 0x0, 0x4, 0x4, 0x2e5a7ada, 0x9, 0x2, 0x7ff, 0x0, 0x9, 0x6, 0x3ff, 0x7, 0x6, 0x5, 0x80000000, 0x7ff, 0x4, 0xa7, 0x71d, 0x7ff]}]}}, @TCA_RATE={0x8, 0x5, {0x5, 0x5}}, @TCA_RATE={0x8, 0x5, {0x1, 0x7765}}, @TCA_RATE={0x8, 0x5, {0x101, 0x6}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0xc4c, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_RTAB={0x404, 0x4, [0x40, 0x2, 0x5, 0x100000000, 0x8, 0x40, 0x1, 0x39, 0x1, 0x5, 0x8, 0x3d, 0x783f64b7, 0x57, 0x80f8, 0x3, 0x3, 0xba, 0x0, 0xffffffff, 0x3d, 0x6, 0x5b8, 0x6, 0x5, 0x1, 0x0, 0x5, 0x400, 0xffffffff, 0xfff, 0x5, 0x4986, 0x100000000, 0x80, 0x7, 0x80000000, 0x800, 0x1, 0xfff, 0xedaf, 0x400, 0xff, 0x0, 0x6, 0xaa59fcc, 0x6, 0x8, 0x9, 0x5, 0x1, 0x1, 0x4, 0x1, 0x4a9ca01e, 0x81, 0x0, 0x5, 0x718fea4, 0x7, 0x528, 0x2, 0x10000, 0xd73d, 0xfb8, 0x7, 0xfffffffffffffffc, 0x0, 0x8, 0x10000, 0x7, 0x65, 0x101, 0x1, 0x1, 0x10001, 0x9, 0x7, 0x1, 0x2, 0x6, 0x2, 0x1, 0x3, 0x7ff, 0xfffffffffffffff7, 0x3f, 0x9, 0x8, 0xfff, 0x7f, 0x480000000000000, 0x4, 0x7, 0x100000000, 0x81, 0x9, 0x5, 0x4, 0x2, 0x7, 0x2, 0x813, 0xffffffff, 0x80000000, 0x3, 0x55, 0x9, 0x81, 0x8, 0x9, 0x57, 0x2, 0x0, 0x3, 0x8, 0x1, 0xefc, 0x20, 0x3, 0xddba, 0x3, 0x7, 0x9, 0x8, 0x100000000, 0x100000000, 0x6, 0xa672, 0x3, 0xff, 0x8, 0x6, 0x0, 0x2, 0x7fff, 0x400, 0x9, 0x3, 0x1, 0x5, 0x4, 0x3, 0x2, 0x8, 0x7ff, 0x4, 0x0, 0x9, 0x2, 0x0, 0xa9, 0x0, 0x4, 0x5, 0xe4a9, 0x7fff, 0x5, 0x3, 0x2, 0x200, 0x2, 0x5, 0x4, 0x2e, 0x80000000, 0x193, 0x1f, 0x2, 0x6, 0x3, 0x0, 0x2, 0x409, 0x1c18761c, 0x4, 0xfffffffffffffffb, 0x80000001, 0x57c6f133, 0xffff, 0xffffffffffffffff, 0x800, 0x3f, 0x9, 0x6ce, 0x80000001, 0xfffffffffffff801, 0x0, 0x748, 0x100000000, 0x100000000, 0x7fff, 0xc769, 0x8, 0x200, 0x13a5, 0x4, 0xbc, 0x1, 0x7ff, 0x3, 0x6, 0x7530, 0x4, 0x6, 0x7f, 0x9, 0x0, 0x7fff, 0x3, 0x6, 0x6, 0x0, 0x3, 0x1000, 0x8000, 0xffff, 0x8, 0x100000000, 0x20000000000000, 0x7f, 0x100000000, 0xff, 0x9, 0x6ce, 0x400, 0x6, 0x3, 0x3ff, 0x1, 0x861, 0x80000001, 0x8e2, 0xaf, 0x5, 0x6, 0x0, 0x81, 0x0, 0x1ff, 0x10000, 0x9, 0x6, 0x4, 0x8001, 0x5, 0xfff, 0x4, 0x3, 0x2, 0x7, 0x0, 0x98, 0x3, 0x5, 0x1]}, @TCA_HTB_CTAB={0x404, 0x3, [0x40, 0x6f8, 0xd29, 0x5, 0x2, 0x0, 0x2, 0x0, 0x7, 0x200, 0x7, 0x2000000000000000, 0x1, 0x2, 0x101, 0x9, 0x3ff, 0x9, 0x9, 0x4, 0x100000001, 0x2, 0x0, 0x1f, 0x5, 0x6, 0x40, 0x1, 0x101, 0x40, 0x100, 0xa36, 0x7, 0x9c, 0xffff, 0x1, 0x4, 0x4, 0x0, 0x0, 0x10001, 0x5, 0xfffffffffffffffd, 0x1, 0x40, 0xff, 0x5, 0x2, 0x5, 0x0, 0x7, 0x8, 0x6, 0x3, 0x0, 0xc2, 0x6, 0x6, 0x80000000, 0x7fffffff, 0xff, 0x6, 0x6, 0x80000001, 0x1, 0x3f, 0x400, 0x6, 0xffffffff7fffffff, 0x1, 0x40, 0x5, 0x1, 0x4, 0x4, 0x1f, 0x40, 0x5, 0x9, 0x9, 0x20000, 0x4, 0x0, 0x5, 0x0, 0x400000000, 0xd8, 0x4, 0xb087, 0xf1cf, 0x5, 0x7, 0x1, 0x3ff, 0x9e, 0x2, 0xffffffff, 0x80000000, 0x81, 0x81, 0x3ff, 0x80000001, 0x6, 0x100000001, 0x990000000000000, 0x9, 0x6, 0x1ff, 0x9, 0x3, 0x8, 0x4, 0x8, 0x9, 0x4, 0x7, 0x3, 0xffffffffffff7c31, 0xc7f, 0x3, 0x400, 0xf60b, 0xf6, 0x0, 0x6, 0x5, 0x0, 0xfff, 0x5, 0x5, 0x1, 0x1000, 0x1, 0x4, 0x7ff, 0x9, 0x5, 0xff, 0x800, 0x3, 0x6, 0x6, 0x3, 0x5, 0x3, 0x2, 0x9, 0x4, 0x8a, 0x909, 0x1, 0xe, 0x8000, 0x200, 0x6, 0xaf9, 0xffffffffffffff62, 0x200000000000, 0x641, 0x8, 0x7, 0x6, 0x3, 0x80000001, 0x100000, 0x4, 0x8, 0x1, 0x81, 0x44683b53, 0x0, 0x2, 0x8000, 0x3f0e8000000000, 0x7, 0x1ff, 0x1, 0x8001, 0x2, 0x2, 0x8, 0x3, 0x8, 0x20, 0xcdb2, 0x5, 0x663e, 0xdd4, 0x4, 0x4, 0x1, 0x42c9, 0x7, 0x80000001, 0x58, 0xfffffffffffff001, 0x1ff, 0x81, 0x1ff, 0xe9, 0x4, 0x966b, 0x100, 0x7, 0x40, 0x3f, 0x9, 0x4, 0x0, 0x6, 0x80, 0x0, 0x2, 0x200, 0x3, 0x7, 0x3, 0x6, 0x1, 0x1, 0x1, 0x1000, 0x8, 0x8001, 0x8000, 0xafed, 0x5, 0x1, 0x8, 0x400, 0x3278, 0x4, 0xfff, 0x3ff, 0xc7, 0x8, 0x400, 0xfff, 0x2, 0x9, 0x6, 0x3, 0x10000, 0xfffffffffffff001, 0xae4, 0x2, 0x100, 0x1ff, 0x100, 0x800, 0x9, 0x7ff, 0x8ce6, 0x101, 0x4, 0x7]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x9a000000000, 0x8001, 0x5, 0x4}, {0x7, 0x2, 0x9, 0x400, 0x100000000, 0x8}, 0x3, 0x7, 0x80, 0xe0, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x6, 0x8, 0x7, 0x1, 0x9, 0x7f, 0x400, 0x80000000, 0x7, 0x80, 0x1, 0x5, 0x10001, 0x5, 0x6, 0xf5, 0x9, 0x1, 0xff, 0x2, 0x9, 0xff, 0x81, 0x1, 0x3, 0x9, 0x0, 0x2, 0xfffffffffffffffb, 0x1, 0x8, 0x100, 0x0, 0x7, 0x1, 0x9, 0x0, 0xd68, 0x8, 0x3ff, 0xa3ee, 0x8000, 0x20, 0x79, 0x1, 0x2, 0x3, 0x0, 0x8, 0xfffffffffffffffe, 0x2, 0x7, 0xfffffffffffff801, 0x5, 0xea2, 0x4, 0x6, 0xff, 0x6, 0x9, 0xfb17, 0x3ff, 0xffffffffffffffe1, 0x7fffffff, 0x8, 0x401, 0xc000, 0x5, 0x3f, 0x1, 0x978b, 0x5, 0xfffffffff59f7a89, 0x100000000, 0x98b1, 0x1, 0x800, 0x682, 0x7, 0x6, 0x800, 0x862d, 0x5, 0x80000000, 0x7, 0xff, 0x6, 0x8, 0x2, 0x870, 0x2, 0x9, 0xfffffffffffffffc, 0x7fff, 0x0, 0x2c00, 0x7, 0x5, 0x80000001, 0x3ff, 0x81, 0x9, 0xd9, 0x80000001, 0x8, 0x1, 0xc6, 0x0, 0x0, 0x5, 0xbaf0, 0x8, 0x7f, 0x8000, 0x4, 0xfffffffffffffb11, 0x0, 0x800000000, 0x3, 0x7, 0x3, 0x7, 0x1, 0x8000, 0x9, 0x5, 0x0, 0x6, 0x157b00000, 0x5, 0x6d0, 0x7fb, 0x9, 0x2, 0x401, 0x7, 0x4, 0x1, 0x100000001, 0x3, 0x8, 0xfffffffffffffe00, 0x8, 0xce95, 0x1, 0x3ff, 0x0, 0x1, 0x2, 0x8, 0x9, 0x3, 0x4, 0x8, 0xf0, 0x3, 0x7, 0x6, 0x101, 0xf2, 0xd2, 0x0, 0xfffffffffffffffe, 0x9, 0x100000000, 0x200000000000000, 0xfffffffffffff005, 0x7, 0xffffffffffffffc0, 0x5, 0x4, 0x3, 0x5, 0xf, 0xfffffffffffffffc, 0x5, 0x7f, 0x4, 0x6, 0x7, 0x5, 0x8, 0x2, 0x8, 0x1, 0x0, 0x5, 0x3, 0x5, 0x9, 0x6, 0x5, 0x6, 0xffffffff00000000, 0x7, 0x6, 0x9, 0x20, 0x2, 0x3, 0x1, 0x5, 0x6, 0xfe, 0x800, 0x0, 0x80000001, 0xffff, 0x31, 0x8000, 0xcc, 0x0, 0x1, 0x1e, 0x9, 0x3, 0xbd1, 0x7, 0x400, 0x0, 0x0, 0x863, 0x8, 0x100000000, 0x8, 0x2, 0x3, 0x9, 0x5, 0x3, 0x1, 0xd4a, 0x661, 0x0, 0x9, 0x2, 0x1, 0xfffffffffffff88d, 0x5, 0x80000001, 0x4, 0x1, 0x8001, 0x1, 0x5, 0x9, 0x42, 0x9, 0x40, 0x5, 0x4, 0x4, 0xfffffffffffffffb, 0x8]}]}}]}, 0x10b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000080)) write$sndseq(r1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$FICLONE(r0, 0x40049409, r4) 18:18:17 executing program 2: 18:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x21000000}}}], 0xffffff76) 18:18:17 executing program 4: [ 1627.426800][ T26] audit: type=1804 audit(1555611498.093:4504): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1894/memory.events" dev="sda1" ino=17130 res=1 [ 1627.462656][ T26] audit: type=1804 audit(1555611498.133:4505): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1894/memory.events" dev="sda1" ino=17130 res=1 18:18:18 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100005, 0x500001c) 18:18:18 executing program 2: 18:18:18 executing program 4: 18:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffdfc, 0x0, 0x0, 0x0) 18:18:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x22000000}}}], 0xffffff76) 18:18:18 executing program 4: 18:18:18 executing program 2: 18:18:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x23000000}}}], 0xffffff76) [ 1627.981754][ T26] audit: type=1804 audit(1555611498.653:4506): pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2316/memory.events" dev="sda1" ino=17109 res=1 18:18:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:18 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100006, 0x500001c) 18:18:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events:', 0x2da8020000100000, 0x500001c) 18:18:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x26000000}}}], 0xffffff76) 18:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0) [ 1628.248113][ T26] audit: type=1804 audit(1555611498.913:4507): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir269498524/syzkaller.eEXIDs/3487/memory.events" dev="sda1" ino=17113 res=1 18:18:19 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000240)={[0x6000, 0x6002, 0xf004, 0x6000], 0x8001, 0x4, 0x3}) 18:18:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x3b310000}}}], 0xffffff76) 18:18:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffeb, 0x0, 0x0, 0x0) 18:18:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x95ffffff}}}], 0xffffff76) 18:18:19 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1628.955211][ T9228] FAULT_INJECTION: forcing a failure. [ 1628.955211][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.046891][ T9228] CPU: 0 PID: 9228 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #73 [ 1629.054822][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.064894][ T9228] Call Trace: [ 1629.068201][ T9228] dump_stack+0x172/0x1f0 [ 1629.072562][ T9228] should_fail.cold+0xa/0x15 [ 1629.077177][ T9228] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1629.082992][ T9228] ? ___might_sleep+0x163/0x280 [ 1629.087854][ T9228] __should_failslab+0x121/0x190 [ 1629.092804][ T9228] should_failslab+0x9/0x14 [ 1629.097315][ T9228] kmem_cache_alloc_trace+0x2d1/0x760 [ 1629.102728][ T9228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1629.108997][ T9228] ? kasan_check_read+0x11/0x20 [ 1629.113937][ T9228] do_shmat+0x5c6/0x1090 [ 1629.118198][ T9228] ? __x32_compat_sys_old_shmctl+0xc0/0xc0 [ 1629.124013][ T9228] ? fput+0x1b/0x20 [ 1629.127834][ T9228] ? ksys_write+0x1f1/0x2d0 [ 1629.132351][ T9228] __x64_sys_shmat+0xd1/0x170 [ 1629.137043][ T9228] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1629.142527][ T9228] ? do_shmat+0x1090/0x1090 [ 1629.147052][ T9228] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1629.152357][ T9228] ? trace_hardirqs_on+0x67/0x230 [ 1629.157396][ T9228] do_syscall_64+0x103/0x610 [ 1629.162008][ T9228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1629.167914][ T9228] RIP: 0033:0x458c29 [ 1629.171812][ T9228] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:18:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xb2000000}}}], 0xffffff76) [ 1629.191433][ T9228] RSP: 002b:00007fa9aa90bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1629.199883][ T9228] RAX: ffffffffffffffda RBX: 00007fa9aa90bc90 RCX: 0000000000458c29 [ 1629.207875][ T9228] RDX: 0000000000000000 RSI: 0000000020ffd000 RDI: 0000000000000000 [ 1629.215858][ T9228] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1629.223850][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa9aa90c6d4 [ 1629.231855][ T9228] R13: 00000000004c70c7 R14: 00000000004dccb0 R15: 0000000000000004 18:18:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:20 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100007, 0x500001c) 18:18:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xbf000000}}}], 0xffffff76) 18:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2000000000, 0x0, 0x0, 0x0) 18:18:20 executing program 4 (fault-call:2 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xf4010000}}}], 0xffffff76) [ 1629.747611][ T9256] FAULT_INJECTION: forcing a failure. [ 1629.747611][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.812587][ T9256] CPU: 1 PID: 9256 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #73 [ 1629.820529][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.830758][ T9256] Call Trace: [ 1629.834077][ T9256] dump_stack+0x172/0x1f0 [ 1629.838578][ T9256] should_fail.cold+0xa/0x15 [ 1629.843189][ T9256] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1629.849007][ T9256] ? ___might_sleep+0x163/0x280 [ 1629.853891][ T9256] __should_failslab+0x121/0x190 [ 1629.858834][ T9256] should_failslab+0x9/0x14 [ 1629.863350][ T9256] kmem_cache_alloc+0x2b2/0x6f0 [ 1629.868207][ T9256] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1629.874149][ T9256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1629.880402][ T9256] __alloc_file+0x27/0x300 [ 1629.884831][ T9256] alloc_empty_file+0x72/0x170 [ 1629.889613][ T9256] alloc_file+0x5e/0x4d0 [ 1629.893877][ T9256] alloc_file_clone+0x26/0xc0 [ 1629.898568][ T9256] do_shmat+0x63f/0x1090 [ 1629.902823][ T9256] ? __x32_compat_sys_old_shmctl+0xc0/0xc0 [ 1629.908633][ T9256] ? fput+0x1b/0x20 [ 1629.912456][ T9256] ? ksys_write+0x1f1/0x2d0 [ 1629.916971][ T9256] __x64_sys_shmat+0xd1/0x170 [ 1629.921752][ T9256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1629.921769][ T9256] ? do_shmat+0x1090/0x1090 [ 1629.921786][ T9256] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1629.921803][ T9256] ? trace_hardirqs_on+0x67/0x230 [ 1629.921823][ T9256] do_syscall_64+0x103/0x610 [ 1629.931784][ T9256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1629.952604][ T9256] RIP: 0033:0x458c29 [ 1629.956510][ T9256] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1629.976575][ T9256] RSP: 002b:00007fa9aa8eac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1629.985001][ T9256] RAX: ffffffffffffffda RBX: 00007fa9aa8eac90 RCX: 0000000000458c29 [ 1629.992983][ T9256] RDX: 0000000000000000 RSI: 0000000020ffd000 RDI: 0000000000000000 [ 1630.000966][ T9256] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 18:18:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfdffffff}}}], 0xffffff76) [ 1630.008947][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa9aa8eb6d4 [ 1630.016922][ T9256] R13: 00000000004c70c7 R14: 00000000004dccb0 R15: 0000000000000003 18:18:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfeffffff}}}], 0xffffff76) 18:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4000000000, 0x0, 0x0, 0x0) 18:18:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xffffff95}}}], 0xffffff76) 18:18:20 executing program 4 (fault-call:2 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1630.392828][ T9279] FAULT_INJECTION: forcing a failure. [ 1630.392828][ T9279] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.489359][ T9279] CPU: 0 PID: 9279 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #73 [ 1630.497293][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.507377][ T9279] Call Trace: [ 1630.510685][ T9279] dump_stack+0x172/0x1f0 [ 1630.515139][ T9279] should_fail.cold+0xa/0x15 [ 1630.519747][ T9279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1630.525730][ T9279] ? ___might_sleep+0x163/0x280 [ 1630.530610][ T9279] __should_failslab+0x121/0x190 [ 1630.535566][ T9279] should_failslab+0x9/0x14 [ 1630.540086][ T9279] kmem_cache_alloc+0x2b2/0x6f0 [ 1630.544947][ T9279] ? rcu_read_lock_sched_held+0x110/0x130 [ 1630.550762][ T9279] ? kmem_cache_alloc+0x32e/0x6f0 [ 1630.555811][ T9279] security_file_alloc+0x39/0x170 [ 1630.560844][ T9279] __alloc_file+0xac/0x300 [ 1630.565284][ T9279] alloc_empty_file+0x72/0x170 [ 1630.570059][ T9279] alloc_file+0x5e/0x4d0 [ 1630.574314][ T9279] alloc_file_clone+0x26/0xc0 [ 1630.579011][ T9279] do_shmat+0x63f/0x1090 [ 1630.583276][ T9279] ? __x32_compat_sys_old_shmctl+0xc0/0xc0 [ 1630.589091][ T9279] ? fput+0x1b/0x20 [ 1630.592913][ T9279] ? ksys_write+0x1f1/0x2d0 [ 1630.597425][ T9279] __x64_sys_shmat+0xd1/0x170 [ 1630.602113][ T9279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1630.607581][ T9279] ? do_shmat+0x1090/0x1090 [ 1630.612189][ T9279] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1630.617574][ T9279] ? trace_hardirqs_on+0x67/0x230 [ 1630.622650][ T9279] do_syscall_64+0x103/0x610 [ 1630.627271][ T9279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1630.633176][ T9279] RIP: 0033:0x458c29 [ 1630.637106][ T9279] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1630.656729][ T9279] RSP: 002b:00007fa9aa90bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1630.665156][ T9279] RAX: ffffffffffffffda RBX: 00007fa9aa90bc90 RCX: 0000000000458c29 [ 1630.673139][ T9279] RDX: 0000000000000000 RSI: 0000000020ffd000 RDI: 0000000000000000 [ 1630.681125][ T9279] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1630.689131][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa9aa90c6d4 [ 1630.697201][ T9279] R13: 00000000004c70c7 R14: 00000000004dccb0 R15: 0000000000000004 [ 1630.731185][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1630.731201][ T26] audit: type=1804 audit(1555611501.403:4513): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1897/memory.events" dev="sda1" ino=17045 res=1 18:18:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:21 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100008, 0x500001c) 18:18:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfffffffd}}}], 0xffffff76) [ 1630.818294][ T26] audit: type=1800 audit(1555611501.433:4514): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=17045 res=0 18:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000000000, 0x0, 0x0, 0x0) 18:18:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfffffffe}}}], 0xffffff76) [ 1630.951876][ T26] audit: type=1804 audit(1555611501.623:4515): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2318/memory.events" dev="sda1" ino=17553 res=1 [ 1631.056034][ T26] audit: type=1804 audit(1555611501.653:4516): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1898/memory.events" dev="sda1" ino=17130 res=1 18:18:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:21 executing program 4 (fault-call:2 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x10000000000}}}], 0xffffff76) [ 1631.143534][ T26] audit: type=1804 audit(1555611501.803:4517): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir269498524/syzkaller.eEXIDs/3489/memory.events" dev="sda1" ino=16541 res=1 18:18:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1631.342779][ T26] audit: type=1804 audit(1555611502.003:4518): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2319/memory.events" dev="sda1" ino=17149 res=1 18:18:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x313b00000000}}}], 0xffffff76) 18:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xc000000000, 0x0, 0x0, 0x0) 18:18:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3f00) 18:18:22 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1631.967164][ T26] audit: type=1804 audit(1555611502.633:4519): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1898/memory.events" dev="sda1" ino=17130 res=1 18:18:22 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100009, 0x500001c) 18:18:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x70000000000000}}}], 0xffffff76) 18:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x400000000000, 0x0, 0x0, 0x0) 18:18:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3f000000) [ 1632.009946][ T26] audit: type=1804 audit(1555611502.673:4520): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1898/memory.events" dev="sda1" ino=17130 res=1 [ 1632.189985][ T26] audit: type=1804 audit(1555611502.863:4521): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2319/memory.events" dev="sda1" ino=17149 res=1 18:18:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x100000000000000}}}], 0xffffff76) 18:18:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3f00000000000000) 18:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x60ffffffffff, 0x0, 0x0, 0x0) 18:18:23 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000a, 0x500001c) 18:18:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x400000000000000}}}], 0xffffff76) 18:18:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x02', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmget$private(0x0, 0x2000, 0x402, &(0x7f0000ffb000/0x2000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) [ 1632.442346][ T26] audit: type=1804 audit(1555611503.113:4522): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2320/memory.events" dev="sda1" ino=17133 res=1 18:18:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x04', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x500000000000000}}}], 0xffffff76) 18:18:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x05', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x42bc, 0xffffffffffffffd7) ioctl$TCFLSH(r1, 0x540b, 0x1000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x740000000000, 0x0, 0x0, 0x0) 18:18:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x800000000000000}}}], 0xffffff76) 18:18:24 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000b, 0x500001c) 18:18:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1e00000000000000}}}], 0xffffff76) 18:18:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000040)="0adc69243c127b8e9bd0701705309fcdaaba121d6331dba00d09a6329cff5722448e154ee8de16c5bdf89ec50100d245d6f9805c70102e62f8c6049efe8d4e2da532327af0a4d8a311744a8f9e44b4d4069ea26ba8a3a74cc12dfe000000000000000000000002000000") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x7f6479efe000, 0x0, 0x0, 0x0) 18:18:24 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2000) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@remote={[], 0x1}, 0xc, 'netdevsim0\x00'}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x200, 0x39a55365, 0x0, 0x1, 0x3, 0x9, 0x552, 0x88, 0x8, 0xa885, 0x4, 0x8, 0x0, 0x5, 0x1, 0x2}}) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x483, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[0x9]}) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000300)={0x8, 0x101, 0xffffffffffffffb8, 0x100000001}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="100426bd7000fedbdf250400000008000600195380d4692e5404003e0014000400070000000008000003000000010000000c000400060000000600000018000400ff010000410f0000010100ff07000000ff01000008000800030000000000080006000200000008000500030000000800050023000000bb78c8412239dcd65222bd5efb7c52869055b6d434b45e2085341b0816dcce01000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000080) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 18:18:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x1f00000000000000}}}], 0xffffff76) 18:18:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 18:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x7fffffffefff, 0x0, 0x0, 0x0) 18:18:25 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000c, 0x500001c) 18:18:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x777, @mcast1, 0x10001}], 0x1c) ioctl(r0, 0x410000, &(0x7f0000000240)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/102) 18:18:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2000000000000000}}}], 0xffffff76) 18:18:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x940000000000, 0x0, 0x0, 0x0) 18:18:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r1 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x800000000006000) 18:18:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2100000000000000}}}], 0xffffff76) 18:18:25 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x10000, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\xff', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2200000000000000}}}], 0xffffff76) 18:18:25 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000d, 0x500001c) 18:18:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1000000000000, 0x0, 0x0, 0x0) 18:18:25 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc002b38127b8e9bd170f725f83781e1d8307cb099c9c6df34afc8313424148c7fca9f3cc23b313792b7c2c70f93dda6f8096a0a7e2f8248cac1ebff43a44c02528031470b4921405af092f140b5ccbac4d67a3931d39ca6060bbea68da6f2a5d5aa3189aea84f27a06167e429ddd964a97740090989cab26f2fe6a0ec1aebeffe4a73a750b220ecff1c2f36079637dad55f20898264") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x1ff, 0x9}, 'port0\x00', 0x0, 0x8, 0x3, 0x8, 0x3ff, 0x0, 0x3, 0x0, 0x1, 0xd0cc}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\xff', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2300000000000000}}}], 0xffffff76) 18:18:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\xfc', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:26 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000e, 0x500001c) 18:18:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x2600000000000000}}}], 0xffffff76) 18:18:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000001f80)='/dev/input/mouse#\x00', 0x9, 0x100) sendto$isdn(r1, &(0x7f0000004f80)={0x7, 0xff, "cd54c0d43dba12b919c712ffc3035f51e80e592957db43e95f26840effeb5966848670a0d96e221130b0b1b11c675b98b0f844d33794cb8fd78be447b2b8d87a7e87121bcdd661146a5ea371b04071c35d17b1a78068e7e44114f7fe128be8827a4bcecb1b45de9c32084c8976deb2b8854bf0b6d62b1b6d694275cb736aa7be935291cd8112dccfc9baaf71d9f3dd8c8f448a8fd6abcf0dcf81a3"}, 0xa3, 0x10, &(0x7f0000004bc0)={0x22, 0xff, 0x4f, 0x6, 0xffffffffffffffff}, 0x6) ioctl(r0, 0x7, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) recvmmsg(r0, &(0x7f0000004c80)=[{{&(0x7f0000000100)=@caif=@dbg, 0x80, &(0x7f0000001740)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/249, 0xf9}, {&(0x7f0000001640)=""/255, 0xff}], 0x9}, 0x6}, {{&(0x7f0000001800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/252, 0xfc}, {&(0x7f0000001a40)=""/151, 0x97}, {&(0x7f0000001b00)=""/233, 0xe9}, {&(0x7f0000001c00)=""/218, 0xda}, {&(0x7f0000001d00)=""/74, 0x4a}], 0x6, &(0x7f0000001e00)=""/55, 0x37}, 0x8000}, {{&(0x7f0000001e40)=@rc, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001ec0)=""/164, 0xa4}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/139, 0x8b}, {&(0x7f0000002080)=""/101, 0x65}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/6, 0x6}, {&(0x7f0000003140)=""/149, 0x95}, {&(0x7f0000003200)=""/215, 0xd7}, {&(0x7f0000003300)=""/187, 0xbb}, {&(0x7f00000033c0)=""/4096, 0x1000}], 0xa, &(0x7f0000004480)=""/128, 0x80}, 0x101}, {{&(0x7f0000004500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004580)=""/34, 0x22}, {&(0x7f00000045c0)=""/61, 0x3d}, {&(0x7f0000004600)=""/35, 0x23}, {&(0x7f0000004640)=""/157, 0x9d}, {&(0x7f0000004700)=""/65, 0x41}, {&(0x7f0000004780)=""/231, 0xe7}], 0x6, &(0x7f0000004900)=""/171, 0xab}, 0xd940}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000049c0)=""/96, 0x60}], 0x1, &(0x7f0000004a80)=""/153, 0x99}, 0x5}, {{&(0x7f0000004b40)=@nl=@unspec, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004bc0)}], 0x1, &(0x7f0000004c40)=""/44, 0x2c}, 0x100}], 0x6, 0x2000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004e40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000004f40)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004e80)={0x58, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @empty}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x58}}, 0x1) sendto$isdn(r1, &(0x7f0000005040)={0x4, 0x7, "8009cf93a7f7781f95c7181787b22e04956c5b81a1a1f7434be8a7b424d15090c8528bcc91c33af9ed5424e142f83efbbd2b313fceebd419a7ff19dd00b2b2c5e4cbed3e8b0fb448020d254b9464a433e38fb4f315dccc34c5855516f3497e3c67680708a95cd1b0baa85014b3da6a03ce80f6b4f0e92ab84d9c51f80d837f7b20bc85d1ea7186dcbb36f8042f329fc5f7d0ac"}, 0x9b, 0x40, &(0x7f0000005100)={0x22, 0x800, 0xd7ae, 0x80000001, 0x1}, 0x6) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000080)={0xa, 0x7, 0x2c81, 0x4}, 0xa) 18:18:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\xfe', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x20000000000000, 0x0, 0x0, 0x0) 18:18:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @loopback}, &(0x7f0000000080)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x95ffffff00000000}}}], 0xffffff76) [ 1635.800996][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1635.801011][ T26] audit: type=1804 audit(1555611506.473:4530): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2324/memory.events" dev="sda1" ino=17177 res=1 18:18:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x220200, 0x0) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000100)="80c366af743f95d444385edcd9024d4b3619601570a72e69026782eced38c8f4f9e33e2936bcacc8f9804cb056197d1510464d8f0429f7f963903007543ea8706c72f3047e75b52ef3bd47d8de5d383fa6e5205a3c917d852a7409cf113bac912772c7d744cf417d049976f9bbe3585226aa45c396ceef12cc423262c8572294dddce7ff89f9a35e03ba39fe4233", 0x8e) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x7) 18:18:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xb200000000000000}}}], 0xffffff76) 18:18:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1636.559699][ T26] audit: type=1804 audit(1555611507.233:4531): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2325/memory.events" dev="sda1" ino=17177 res=1 18:18:27 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010000f, 0x500001c) 18:18:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x50710000000000, 0x0, 0x0, 0x0) 18:18:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 18:18:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xbf00000000000000}}}], 0xffffff76) 18:18:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x20000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="74c4923bbde2f2d0e46b7c8fbec27c4ad3237a4271b26e74166afad2a7f4b43b02f63be988489aed1e245e0cf07a6bbf63b334c99a50c5fe628707", 0x3b) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) sendto$rose(r2, &(0x7f0000000100)="7109ceacc360ba8a63d98dbda128a8e5cdcbe6ad6c35537a555b82ba39a3fd96dc5af53665793b06cf256187256eb89cc66fa56d24962d8c1c8e828957b9d82e6caedd1e9caf03f826337b5c0d5973991a884ca3b345bf62ccfaccb85cd4bf55825214ccb926ac250d8866e3571d417fab9295c673b0bf491264b63fec2629d900444e0f2a6a2ac903e0df0dae6172bf7d6870c6fb427a7a7dfb8c6fd65ead412fb75e5bc5", 0xa5, 0x20000040, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 18:18:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xf401000000000000}}}], 0xffffff76) 18:18:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1636.935937][ T26] audit: type=1804 audit(1555611507.603:4532): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1905/memory.events" dev="sda1" ino=17197 res=1 18:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0) 18:18:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x904c, &(0x7f0000000040)="0adc050000007b8e9bd070f8371a241d18df5382575f24ed301a7a9012fd3a354868f871d13753ab2ec467f991ba93d2723776ba7fe8ca229573a1937320a1c7eccf0da9899689e5c9b45489da399b488918052193e629f769dadec4b07b30b147f7be01058e24620c4aa48f783e400d78132a") shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 18:18:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1637.341910][ T26] audit: type=1804 audit(1555611508.013:4533): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2326/memory.events" dev="sda1" ino=17191 res=1 [ 1637.612235][ T26] audit: type=1804 audit(1555611508.283:4534): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1905/memory.events" dev="sda1" ino=17197 res=1 18:18:28 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100010, 0x500001c) 18:18:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfdffffff00000000}}}], 0xffffff76) 18:18:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x41) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x21, 0x0, 0x1}, 0xfffffffffffffffd}}, 0x18) 18:18:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xc0700000000000, 0x0, 0x0, 0x0) 18:18:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:28 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40080, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0xa, &(0x7f0000000200)='+\x1acpuset&\x00'}, 0x30) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3f, 0x7, 0x6, 0x6, 0x0, 0x6, 0x800, 0x8, 0xb09, 0x0, 0x3, 0x100000000, 0x3, 0x0, 0x8000, 0x6cbe, 0x7fffffff, 0x1, 0xfffffffffffffffd, 0x8000, 0x80, 0x4, 0x4, 0x100000001, 0x9, 0x6, 0x80, 0x80000001, 0x3848, 0x1, 0x0, 0x7, 0x2, 0x9, 0x7fff, 0xf43, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0xdba, 0x2d47, 0x7, 0x2, 0x6, 0x1}, r2, 0x7, r0, 0xb) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r4, 0xa}}, 0x10) fcntl$notify(r3, 0x402, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) [ 1638.098601][ T26] audit: type=1804 audit(1555611508.773:4535): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2327/memory.events" dev="sda1" ino=17197 res=1 18:18:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xfeffffff00000000}}}], 0xffffff76) [ 1638.223435][ T26] audit: type=1804 audit(1555611508.813:4536): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1906/memory.events" dev="sda1" ino=17200 res=1 18:18:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:29 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40201, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x1ff, 0x4}, 'port1\x00', 0x4, 0x100000, 0x100000000, 0x434, 0x80000001, 0x4, 0x1000, 0x0, 0x4, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0xffffffff00000000}}}], 0xffffff76) [ 1638.859697][ T26] audit: type=1804 audit(1555611509.533:4537): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1906/memory.events" dev="sda1" ino=17200 res=1 18:18:29 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100011, 0x500001c) 18:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd0500000000000, 0x0, 0x0, 0x0) 18:18:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\xff', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:29 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x440200, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f00000001c0)="0adc0b0000000000000070a639e0caf1ab134f7457da50d93e308353ac9c9d5c8baf1fd592f423e102f5391582acbeb5ff60421255057b53ef39f0a51280d130bc88044326e43b7c36fd66ea0bec9618319b691af4122e2d91192cce475615475ea78aa651fc86109227c466c6a982a0a7f66a341f75b9965510e8813af9b919ec165c8398d26804114ae3000000000000ab84e857c473f5ebbdb568cfa59a8b65560667788ac9") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x4}}}], 0xffffff76) 18:18:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getcwd(&(0x7f0000000040)=""/100, 0x64) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x1010, r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x442000, 0x0) accept(r1, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) [ 1639.294545][ T26] audit: type=1804 audit(1555611509.963:4538): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2328/memory.events" dev="sda1" ino=17191 res=1 18:18:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x5}}}], 0xffffff76) 18:18:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x241) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:30 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100012, 0x500001c) 18:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x2, 0x9, 0x1, 0x7ff, 0x1, [{0x3, 0x7, 0x314, 0x0, 0x0, 0xa80}]}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20041, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000240)={0x7, 0x4}) 18:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xe0ef79647f0000, 0x0, 0x0, 0x0) 18:18:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x8}}}], 0xffffff76) 18:18:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) [ 1639.811349][ T26] audit: type=1804 audit(1555611510.483:4539): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2329/memory.events" dev="sda1" ino=17189 res=1 18:18:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e}}}], 0xffffff76) 18:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200040, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x2}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x1b, 0x0, 0x1}) r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x6000) 18:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 18:18:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:31 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100013, 0x500001c) 18:18:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000040)={0x0, 0x8d9d, 0x0, 0x9, 0x0, 0x520d0a23}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x500, 0x0, 0xffffff8d}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x21}}}], 0xffffff76) 18:18:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100004000000000, 0x0, 0x0, 0x0) 18:18:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x22}}}], 0xffffff76) 18:18:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000040)="0adc69123c127b8e9bd070") shmget(0x2, 0x1000, 0x54000002, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xbf082f46b4b39b62) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x57e5f959, 0x10000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x4) 18:18:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x23}}}], 0xffffff76) 18:18:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1641.373388][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1641.373406][ T26] audit: type=1804 audit(1555611512.043:4542): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1909/memory.events" dev="sda1" ino=17204 res=1 18:18:32 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100014, 0x500001c) 18:18:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100008000000000, 0x0, 0x0, 0x0) 18:18:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x26}}}], 0xffffff76) 18:18:32 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) r1 = gettid() r2 = userfaultfd(0x80800) r3 = socket$l2tp(0x18, 0x1, 0x1) kcmp(r0, r1, 0x7, r2, r3) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r6}}, 0xc) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000140)=r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/221, 0xdd}], 0x1) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1641.852775][ T26] audit: type=1804 audit(1555611512.523:4543): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2331/memory.events" dev="sda1" ino=17213 res=1 18:18:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfeffffff, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x70}}}], 0xffffff76) [ 1642.006928][ T26] audit: type=1804 audit(1555611512.603:4544): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1910/memory.events" dev="sda1" ino=17176 res=1 18:18:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x10000c000000000, 0x0, 0x0, 0x0) 18:18:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xb2}}}], 0xffffff76) [ 1642.642616][ T26] audit: type=1804 audit(1555611513.313:4545): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1910/memory.events" dev="sda1" ino=17176 res=1 18:18:33 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100015, 0x500001c) 18:18:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfffffffe, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf}}}], 0xffffff76) 18:18:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x101000000000000, 0x0, 0x0, 0x0) 18:18:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:33 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000001240)={0x0, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/autofs\x00', 0x40000, 0x0) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x800) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_open_dev$mice(&(0x7f0000001300)='/dev/input/mice\x00', 0x0, 0x200240) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001340)='/dev/video1\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000014c0)={0x2, 0xc, 0x4, 0x41200000, {r10, r11/1000+10000}, {0x3, 0x3, 0x0, 0xe0c, 0x4, 0x0, "30d5fcfd"}, 0x2, 0x3, @offset=0x7, 0x4}) ppoll(&(0x7f0000001380)=[{r0, 0x300}, {r1, 0xc210}, {r2, 0x100}, {r3, 0x1640}, {r4, 0x5220d00f75306f38}, {r5, 0x7280}, {r6, 0x20}, {r7, 0x400}], 0x8, &(0x7f0000001400)={r8, r9+10000000}, &(0x7f0000001440)={0xff2}, 0x8) r12 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r12, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'posix_acl_accesscpusetsystem*em0'}, {0x20, 'vmnet1systemem1'}], 0xa, "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"}, 0x45) ioctl(r12, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r13 = accept$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000001140)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) 18:18:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000000)="fa9c4db5aaf77b1a9ea6381db62482db852f3566acf294833ef97a0197efda3a382e71703bd2fdf1ddc2b4fa051206a17a278e05bdb8b6288d25a5258b93a25bad96b023d882878d8de9729bf835249117be8835c29ad6f586e94ef46795e23933bee09101b9b05db4bfb85af4202de7cf12911bbbbfb05f0ba46272981131382635a4d7abb9b319688abc29e27c7f2192506a50af", 0x95) 18:18:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1643.105345][ T26] audit: type=1804 audit(1555611513.773:4546): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2332/memory.events" dev="sda1" ino=16785 res=1 18:18:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f4}}}], 0xffffff76) 18:18:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, r1, {0xfff2, 0xffeb}, {0xf, 0xffe0}, {0xc, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x4, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:33 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100016, 0x500001c) 18:18:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2) 18:18:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 18:18:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x500}}}], 0xffffff76) 18:18:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x81, "aae8540b746ee1e041a098fa5c02fa13b7dd3a711ff6f2542ae9f9dcc393c8e365e0c41cbfcb3cbdc04528d98523247b0a16e5699fbee28457860808aa40be77eae161bf1fac55823cb1d780e1fe3957739fe7039d9b8ed60c9925b211dd5ae9ba691ee2caeba0d433591b1675651e62f8e8007ccf948def786552ec70b01d718a"}, &(0x7f0000000480)=0x89) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r2}, &(0x7f0000000500)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='yeah\x00', 0x5) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1f, 0x100) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xd64b638bfb127d87}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, r4, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x83, "a276a4c3aa15c68aed105ed32621f5e0089b248de921130fe2b9457d17bbf329dbfc5559ba1cd1534ce2d70cefc7990db3b20e75e0ad2f93fcab061065479b2cd8595ac16df87d4cfc657fa3e7345a0661683f661a11933ca34bd285913715e68b5396a69439d603410c3a557c6e28248aa7aba501bdf216eb4c2ff520c7f0010adca8"}, &(0x7f0000000100)=0xa7) 18:18:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e00}}}], 0xffffff76) 18:18:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x300000000000000, 0x0, 0x0, 0x0) 18:18:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000880)=0xff, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffa, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = getgid() fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rights={0x10}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xc0, 0x20000000}, 0x40) [ 1644.094566][ T26] audit: type=1804 audit(1555611514.763:4547): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2333/memory.events" dev="sda1" ino=16536 res=1 [ 1644.266940][ T26] audit: type=1800 audit(1555611514.933:4548): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=17009 res=0 18:18:35 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100017, 0x500001c) 18:18:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f00}}}], 0xffffff76) 18:18:35 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff80, 0x200000) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 18:18:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a70380561d00adf36d436cd1b9de92094c0f354a3ec9d3ccf9503574dacbc4e96db2049282785158271cd3acbd4edc5f19f4b2374ac0f5f0f4fab8c03a8451434d0496aa9d34cd691860dae7615c49c688ce78b8b2a0efb77818752dee43b046cab293bb87300b73b2e4d23d16f6d2eb3fab77230d9b3ca95cd97757ee14dae19e4b10e2e4fb3cd0878ac7c7a3aa67a1a8f34366cac1430bbcc839331000000000000") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x40000, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq'}}, {@sq={'sq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x800}}, {@rq={'rq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x100000000}}, {@rq={'rq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x85}}, {@timeout={'timeout', 0x3d, 0x6}}], [{@euid_gt={'euid>', r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_lt={'euid<', r2}}, {@dont_appraise='dont_appraise'}, {@uid_lt={'uid<', r3}}, {@seclabel='seclabel'}, {@fowner_gt={'fowner>', r4}}]}}) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40000) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x1, 0x3}) [ 1644.479261][ T26] audit: type=1804 audit(1555611515.153:4549): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1913/memory.events" dev="sda1" ino=17153 res=1 18:18:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2000}}}], 0xffffff76) 18:18:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2040) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x4cc, 0x3, 0x2, 0x300, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x8}, [@nested={0x284, 0x1a, [@generic="e3a8293edd0f4e4a007eb76ba5141b8fbf4c04557ba08ec206828a680128839e25415459829d7c8f5672ca8f1c779da9097ab373ba2afc89efd6879dd0f793ae5f92c8503993f239213975cbdce1dc9d045956dbe616fc7eea0f9c58866c4345e76903ff31b26f5afc8f3f447d02255d0777c55c9ac1243bcbf1459da0c1b286b8b671597d572fd0a60516a01552285cae1d956e5a081b65ca7e4333bafba3997c08fceb2c2df0a8b765843b3a58279c7f608fc201fd948a772072dfcf825af41ed5aa0aa9d7", @generic="79a28206c81b7e7e503fbe0d5e42ce0e55dc2a637c9c4514e184c708e2003958e83437362e4790eb146b5562bd45e863d3fc69aaf93a19f9829d9617d76c44fc05b1c1a4ea81508e29995590ae071e1cdba4b423def48298c6fb7806a0ee0909542956b233b51cf8d6e740f64852c64fff48c543ae43ca58ad69d73d4694e319ec0fec306bff39", @typed={0x90, 0x38, @binary="61a539132a04b1a30218ab12af27d52a98f4c9d88965bab4146640cf4697e6287139add8c736c9a9ee9dcaa7c875e5161021ecddcfb30cb617db31eff0fac4f5c9630701e643d051ad1c564b768032dfb7c7fde19f78e27be556f747e29a127c81618b6994c05e68c6a808917b71d4965587a50c0f2aa644ebe4a21fd0ff676f94e0056bd921d65a1481"}, @typed={0x14, 0x5b, @ipv6=@mcast2}, @generic="a27dc91c53e94f408840279a7137ffa44c84a87ecfb7786fc827968971244739cbafb3bcabc6987925e73b846c7ac68967850993657aa7bbe1db6fd7ddf151fc2a91def18b325c08ea751651dbd1be69df6491978e823d96ec2cebf9e55a932cda9e5b6be1e0d987142432", @typed={0x14, 0x1a, @ipv6=@mcast2}, @typed={0x8, 0x3d, @uid=r2}, @typed={0x8, 0x21, @fd=r0}]}, @nested={0x4, 0x55}, @generic="84d4eb27b97d5012b50ea4d04b6f970345490914522866c5a0d6a6010b5b3c1fb767aa9b405a13d8b84bfa0ce44aa378132d55b1f3d721df8f7ea6bf93e1591df82aeae4d382c00f7457070e5ec38183249b1ab44825e6a07cc1bd3db3896e90316330e653f331001fc412872502b1e8139893258082d8248999b0dda6fa01fa00a2e00f209e419748f2231cb45f1b2ef11106b23b354d489e414065bad5ab39d3e8aa5317e841a40b", @generic="84b961b959df2acb36dabf6992373105016646262026254df46a8aece7902745", @nested={0x8, 0x8c, [@typed={0x4, 0x75}]}, @typed={0xd4, 0x66, @binary="c05ba75fcd329ae506bf90420a09398bc5001db585a35744968ad66ab1e2d93b64bd52e7cb68cf40a68d3d42200ede046571e754a1e9a8149c3df0274610b92b0f0ddf22d013bc4a68303d70ad15d2964a04578c7a6e24f78bbe4950c82b7f86c9ab030c96f492ac4867d6209643e5dd11d0379b00cc0aa542e9db69dfc9bf24f75abf3d4eb97b5dd32611b7e7c1f3269ee42ccd6990da071b9454a5eb251971675969c0a9aa728a9273d8eccf972f2bdf065f19d5b325823a9cbcdd7f47ac3edbac064d54711f41e34d0a13f9"}, @nested={0x88, 0x8c, [@typed={0x4, 0x27}, @typed={0x10, 0x44, @str='trusted&,.\x00'}, @generic="c3bcbc5ab8028e1e09", @generic="ad1be13ad305196e97fa243d247c4db4076adcbf1158d1f1ab24261762c77ab8205b145c8369fd1a173be6c6d321c2969ddbbe95f7e92c8526d4b1207f14526652f2c060be5147f5488ac4cb52f78fa47b09195a693a23b3abc55284f807918d4004eb74"]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f0000000000)='trusted&,.\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x500000000000000, 0x0, 0x0, 0x0) 18:18:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfeffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1644.990413][ T26] audit: type=1804 audit(1555611515.663:4550): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2334/memory.events" dev="sda1" ino=17074 res=1 18:18:35 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100018, 0x500001c) 18:18:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2100}}}], 0xffffff76) 18:18:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000001, 0x400800) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/16) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1645.192944][ T26] audit: type=1804 audit(1555611515.863:4551): pid=10024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1913/memory.events" dev="sda1" ino=17153 res=1 18:18:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x600000000000000, 0x0, 0x0, 0x0) 18:18:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2200}}}], 0xffffff76) 18:18:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff9, 0x101280) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) r8 = getgid() r9 = geteuid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r12 = getgid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000d80)=ANY=[@ANYBLOB="38030000daffffff008000000000000006000000000000000100000000000000ff03000000000000018000000000000000000080ffff00000300000000000000ff000000000000003f0000000000000000feffffffffffff831100000000000007000000000000000000000008000000ffffffffff0000003f000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000cd0000000000000004000000000000000200000000000000040000000300000029242e2300000000010000000000000000000000000000000000010000000000000000000000000008000000eba100000100000000000000f8ffffffffffffff000800000000000005000000000000000100010000000000140a0000000000000600000006000000090000000300000008000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="03000000810000000000000000000000000000000104000000000000000000000000000002000000000000000000000000000000020000000000000007000000000000000300000007000000010000000000000008000000000000000200000000000000f4090000000000007f0000000000000021f9ffffffffffffb9000000060000001d00000008000000080000df9e9311d8b39e90b8d0dbfd66aa0832f3f9c8c35e9cffc148df8f02dc2e1daa0f32e691c40260b349c64adc84024e4f02e62c10cf2b02d9e6f70c72ca44d21c1e5e21a9a451664a21fc3509fea3abef34", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1f0000000000008000000000030000000000000007000000000000001a00000001000000706f7369785f61636c5f6163636573737365637572697479265c000000000000040000000000000003000000000000000100000000000000ffffff7f0000000008000000ff030000030000000000000000000000000000000008000000000000060000000000000005000000000000000900000000000000000000800500000070010000e81a00002a000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="5079000007000000000000000100000000000000000200000000000001000000050000005c000000000000000300000000000000000000000000000040000000000000000700000000000000050000000500000002000000000000000000010000000000080000000000000002000000000000008a0d0000000000000080000000000000fc7c000000000080ff030000040000007f000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0700000008000000000000000100000000000000400000000000000000000000018000009993316b799cf0b7e10b7071feeb56289a5fc7d7a24a89eea08a701d0379f95eb9825bfddcd87c18abe51dd9fe9582bde71c6ef5c544bb673e4ee85f3bc581792259a71f38d1bc2ff912f2ce35514017e7af936690424f6e2030793dd19acf5f8f839f0c0f3bd1c0192bb2da474b6fc29616594bec9cc8846d491e364633de92de83768ed3dab9bfb022854c90623074ca585497a127018fcab4e5afdf7ca0374779c5a4b73696f39d27211d1a36"], 0x338) 18:18:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2300}}}], 0xffffff76) 18:18:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 18:18:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:36 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100019, 0x500001c) 18:18:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2600}}}], 0xffffff76) 18:18:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x20002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x14) ioctl$KVM_RUN(r1, 0xae80, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x700008000000000, 0x0, 0x0, 0x0) 18:18:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:37 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @loopback}, {0x6, @broadcast}, 0x60, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 'veth1_to_bridge\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{}, {}]}) 18:18:37 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010001a, 0x500001c) 18:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x313b}}}], 0xffffff76) 18:18:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 18:18:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000dff000/0x200000)=nil, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$getsig(0x4202, r1, 0x793, &(0x7f0000000100)) [ 1646.871291][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1646.871307][ T26] audit: type=1804 audit(1555611517.543:4556): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2336/memory.events" dev="sda1" ino=16897 res=1 18:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x7000}}}], 0xffffff76) 18:18:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x3, 0x8, 0x7, 0xfffffffffffff693}}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xb200}}}], 0xffffff76) 18:18:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x800008000000000, 0x0, 0x0, 0x0) 18:18:38 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010001b, 0x500001c) 18:18:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x14) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x8, 0x9, 0x2) 18:18:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf00}}}], 0xffffff76) 18:18:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x900000000000000, 0x0, 0x0, 0x0) 18:18:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x6986f41f) 18:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf401}}}], 0xffffff76) 18:18:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1648.000981][ T26] audit: type=1804 audit(1555611518.673:4557): pid=10157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2337/memory.events" dev="sda1" ino=16881 res=1 18:18:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 18:18:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1648.167336][ T26] audit: type=1804 audit(1555611518.793:4558): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1917/memory.events" dev="sda1" ino=16897 res=1 18:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x700000}}}], 0xffffff76) [ 1648.371138][ T26] audit: type=1804 audit(1555611519.043:4559): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1917/memory.events" dev="sda1" ino=16897 res=1 18:18:39 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010001c, 0x500001c) 18:18:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0) 18:18:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x0, 0x100) write$evdev(r1, &(0x7f0000000280)=[{{0x0, 0x7530}, 0x11, 0x2, 0x6}, {{}, 0x15, 0x7, 0xf8a6}], 0x30) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x7}, 0x7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r1, r1, 0x3, 0x2}, 0x10) r6 = semget(0x2, 0x4, 0x4) semctl$IPC_INFO(r6, 0x3, 0x3, &(0x7f0000000040)=""/103) 18:18:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1000000}}}], 0xffffff76) 18:18:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1648.818726][ T26] audit: type=1804 audit(1555611519.493:4560): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2338/memory.events" dev="sda1" ino=17230 res=1 18:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x4000000}}}], 0xffffff76) [ 1648.965483][ T26] audit: type=1804 audit(1555611519.573:4561): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1918/memory.events" dev="sda1" ino=17236 res=1 18:18:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0) 18:18:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1649.657554][ T26] audit: type=1804 audit(1555611520.333:4562): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2338/memory.events" dev="sda1" ino=17230 res=1 [ 1649.740928][ T26] audit: type=1804 audit(1555611520.413:4563): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1918/memory.events" dev="sda1" ino=17236 res=1 18:18:40 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010001d, 0x500001c) 18:18:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x5000000}}}], 0xffffff76) 18:18:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4601, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc69461512544ea0e870") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0) 18:18:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x8000000}}}], 0xffffff76) [ 1650.200351][ T26] audit: type=1804 audit(1555611520.873:4564): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2339/memory.events" dev="sda1" ino=17241 res=1 18:18:40 executing program 4: sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:41 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010001e, 0x500001c) 18:18:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="9bd0700000000000000000a9cae53a86dbca894fc099040a43c829cb0945718441b196d650f4e878d13e5ef224abdf6727c64ad54b9015ca81d410a14109bc465d258dad2003bf141110776e863fdc7ea3773440b3ff8340831be9b4ccc72d02294a3714ef5634b2e24c91e81f2dd7ccc50986d69237f18c92a80e4b84f9bc7d4f576d843d0b0757d6a10823a2f886078c20af33bf115ddef17fda02d05eed6b03194317b12bd61e7ff2e0de883168f483e119de22e3a9d6f3a1399ebea0183e17b3edfd65f684c7de65589d6248f17bf2e5f0d33051d69ae9279d8104") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x109000) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x80, 0x861, 0x7, 0x0, 0x4, 0x8}, 0x200}, 0xa) 18:18:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0) 18:18:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfcfdffff00000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e000000}}}], 0xffffff76) 18:18:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x7dcb, 0x7fff}, 0x2) r2 = fcntl$getown(r1, 0x9) ptrace$setregs(0xf, r2, 0xff61, &(0x7f0000000340)="fd1269b8815e0b8a401cc7829fd3e9b30df53e60342f92951d8afc248a4f2e5bc6e1472b3bd6f6352ed5df6785495b02d40cba4318e704851e579cac7ab9dafa11bafb3c30d0af8d40ba4347bc4a28977759c3d8c9ac1dbd7c30614e25d1bec69e6e8fbaaf0f6b55e906b703b3ababdaea56be4982d463ebb59d6ebf323e56fcf0679937b2497409cf590813be9da8de80869e5d157e21846c337d25680b441fe7788877b9cda2fdc4fb068609ef50bc4e5657a2ef8b6b8dbf3c5fcf242e2a016eb05d1daffe2310014eb80f6f36ed6701e7f18c43a7b4764f5c71") ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r3 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) r4 = geteuid() getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000100)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) r8 = getpid() r9 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f00000002c0)={{0x6, r4, r5, r6, r7, 0x3, 0x9}, 0xbd8, 0x7f, 0x4fc, 0xe2d, r8, r9, 0x7}) 18:18:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f000000}}}], 0xffffff76) 18:18:41 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x8140, 0x8) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/70) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000001c0)) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") syncfs(r0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) 18:18:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1900008000000000, 0x0, 0x0, 0x0) [ 1651.203604][ T26] audit: type=1804 audit(1555611521.853:4565): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2340/memory.events" dev="sda1" ino=17245 res=1 18:18:42 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100021, 0x500001c) 18:18:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000000}}}], 0xffffff76) 18:18:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000018912, &(0x7f00000000c0)="0edc8c6e1ad0c47b0d241f") shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0xa940) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xc00, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x60040, 0x0) 18:18:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1a00008000000000, 0x0, 0x0, 0x0) 18:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x21000000}}}], 0xffffff76) 18:18:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x17c, r2, 0x700, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf41}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff6c41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49e4818d}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl(r0, 0x2, &(0x7f0000000000)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) prctl$PR_GET_DUMPABLE(0x3) 18:18:42 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100022, 0x500001c) 18:18:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x22000000}}}], 0xffffff76) 18:18:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1d00008000000000, 0x0, 0x0, 0x0) 18:18:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x401, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff3b}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb259}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6f6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) 18:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x23000000}}}], 0xffffff76) 18:18:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1652.041995][ T26] audit: type=1804 audit(1555611522.713:4566): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2341/memory.events" dev="sda1" ino=16769 res=1 18:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x26000000}}}], 0xffffff76) 18:18:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') getsockopt(r0, 0x7ff, 0x100000000, &(0x7f00000003c0)=""/95, &(0x7f0000000440)=0x5f) getgroups(0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xee00, 0xee01, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setregid(r2, r3) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x3f, 0x1, 0x9, 0x7, 0x2, "5007d663035bb0575fc4b1c9df66792ec26974", 0x2, 0x5}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf25020000005400030008000800060000000800040000800000e60003000100000008000500e000000208000500ac1414bb0800040009000000080007004e200000080003000400000008000300070000000800030000000000080005000900000024000300080007004e230000080007004e21000008000500e000000208000500e0000002"], 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x3) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 18:18:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) [ 1652.748685][ T26] audit: type=1804 audit(1555611523.423:4567): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2342/memory.events" dev="sda1" ino=16721 res=1 18:18:43 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100023, 0x500001c) 18:18:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x5, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x8}, &(0x7f0000000300)=0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r3, 0x2, 0x3, 0xffffffff}, &(0x7f00000001c0)=0x10) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x30000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x3b310000}}}], 0xffffff76) 18:18:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 18:18:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000040)="0adc69123c127b8e9bd0702ee8e23b888eb8c398cf42290c228a36863f661c519a3346145051b80b08eae10600cfa83d11877395f848e97d1a0000a0") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x95ffffff}}}], 0xffffff76) 18:18:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1653.290503][ T26] audit: type=1804 audit(1555611523.963:4568): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1923/memory.events" dev="sda1" ino=16543 res=1 18:18:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:44 executing program 4: ustat(0x4, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x210000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xb2000000}}}], 0xffffff76) [ 1653.502643][ T26] audit: type=1804 audit(1555611524.173:4569): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2343/memory.events" dev="sda1" ino=16977 res=1 [ 1653.932765][ T26] audit: type=1804 audit(1555611524.603:4570): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1923/memory.events" dev="sda1" ino=16543 res=1 18:18:44 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100024, 0x500001c) 18:18:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0) 18:18:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:44 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf000000}}}], 0xffffff76) 18:18:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty, @dev={[], 0xa}]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1654.371372][ T26] audit: type=1804 audit(1555611525.043:4571): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2344/memory.events" dev="sda1" ino=16673 res=1 18:18:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfcfdffff, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1654.445994][ T26] audit: type=1804 audit(1555611525.093:4572): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1924/memory.events" dev="sda1" ino=17041 res=1 18:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf4010000}}}], 0xffffff76) 18:18:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfeffffff, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0xc0002, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xf, 0x1, "9b9872e5eb30b6c4be4cb4f56fede5e03b8f2025c95b47c6e03b8829428e59db", 0x7955567b}) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0x6, "43b7412e68d3ad15744363"}, 0xd, 0x3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x3419, 0x4) [ 1655.086362][ T26] audit: type=1804 audit(1555611525.753:4573): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1924/memory.events" dev="sda1" ino=17041 res=1 [ 1655.149552][ T26] audit: type=1804 audit(1555611525.823:4574): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2344/memory.events" dev="sda1" ino=16673 res=1 18:18:46 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100025, 0x500001c) 18:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfdffffff}}}], 0xffffff76) 18:18:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0) 18:18:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmget$private(0x0, 0x1000, 0x240, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget(0x1, 0x2000, 0x78000103, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 18:18:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffdfc, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfeffffff}}}], 0xffffff76) 18:18:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffe, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1655.592347][ T26] audit: type=1804 audit(1555611526.263:4575): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2345/memory.events" dev="sda1" ino=17246 res=1 18:18:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000000c0)="0a127056a57abd95bfd070") r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0xfff}, &(0x7f0000000100)=0x8) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1004) 18:18:46 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100026, 0x500001c) 18:18:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:46 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xfa, "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"}, &(0x7f0000000280)=0x102) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x0, 0x30}, 0xc) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xf9, 0x400400) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") recvfrom$inet(r3, &(0x7f0000000300)=""/185, 0xb9, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r4 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x15002, &(0x7f0000000040), 0x0, r2, 0x4}) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x0) 18:18:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0) 18:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffffff95}}}], 0xffffff76) 18:18:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmget(0x2, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x3, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3f, 0x30, 0xff, 0xff}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x9, 0x20}, 0xc) 18:18:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfffffffd}}}], 0xffffff76) 18:18:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xebffffff00000000, 0x0, 0x0, 0x0) 18:18:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") getitimer(0x1, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:47 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100027, 0x500001c) 18:18:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000000)="0adc69123c127b8e9bd070aaf17facb811e9431c6f68b615e8e414d04fe41fb59d6296e0cf35369a62ea5fc69125e2850075e0880a5a73e77c74360476c315db1e7914f2275ec346461a84748b8236614b3e2a58011210dcbc3f0d4c25107ee502956ab5f4e5d79b3bea16a8bdc433df06c277972dccabf525b829c7d30da0d2d6a65ebfc6048591a9e1910818d5c657286f0882") shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) r1 = dup2(r0, r0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x40, &(0x7f0000000180)=0x4) r2 = shmget(0x1, 0x1000, 0xda0, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) syz_read_part_table(0x2, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="c63a2c01d1ce2293ef8f37ec3b7fee73f2f17b97b35e78db9b6b", 0x1a, 0x8}]) 18:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfffffffe}}}], 0xffffff76) 18:18:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfcfdffff00000000, 0x0, 0x0, 0x0) 18:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x10000000000}}}], 0xffffff76) 18:18:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xda) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 18:18:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x313b00000000}}}], 0xffffff76) 18:18:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) 18:18:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfcfdffff00000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1657.509991][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1657.510007][ T26] audit: type=1804 audit(1555611528.173:4578): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1927/memory.events" dev="sda1" ino=17260 res=1 [ 1657.705486][ T26] audit: type=1804 audit(1555611528.373:4579): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2347/memory.events" dev="sda1" ino=16540 res=1 18:18:48 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100028, 0x500001c) 18:18:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0) 18:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x70000000000000}}}], 0xffffff76) 18:18:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 18:18:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfeffffff00000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x100000000000000}}}], 0xffffff76) 18:18:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x905, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1658.132105][ T26] audit: type=1804 audit(1555611528.803:4580): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1928/memory.events" dev="sda1" ino=17269 res=1 18:18:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xa0001, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x2) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0xc0000) setsockopt$inet_dccp_int(r2, 0x21, 0x10, &(0x7f0000000100)=0xffffffff, 0x4) 18:18:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0) [ 1658.501303][ T26] audit: type=1804 audit(1555611529.173:4581): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2348/memory.events" dev="sda1" ino=17265 res=1 [ 1658.830254][ T26] audit: type=1804 audit(1555611529.503:4582): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1928/memory.events" dev="sda1" ino=17269 res=1 18:18:49 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100029, 0x500001c) 18:18:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x400000000000000}}}], 0xffffff76) 18:18:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'/ogdev', 0x3d, './file0'}}]}) 18:18:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x5, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1c) 18:18:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 18:18:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'log.ev', 0x3d, './file0'}}]}) [ 1659.311199][ T26] audit: type=1804 audit(1555611529.983:4583): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2349/memory.events" dev="sda1" ino=17275 res=1 18:18:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x500) openat(r1, &(0x7f0000000100)='./file0\x00', 0x80, 0x18) 18:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x500000000000000}}}], 0xffffff76) 18:18:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'log/ev', 0x3d, './file0'}}]}) 18:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x800000000000000}}}], 0xffffff76) 18:18:50 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002a, 0x500001c) 18:18:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x21) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14, 0x800) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000100)=""/208, 0xd0}, &(0x7f0000000040), 0x40}, 0x20) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @remote}, 0x10) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffff600000, 0x0, 0x0, 0x0) 18:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e00000000000000}}}], 0xffffff76) 18:18:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdyv', 0x3d, './file0'}}]}) 18:18:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f0000000000)="d77d38cd283c6f4cb805903919e1efd6219d20ddbda7ef9f39b4bf8dbb18ddc750f7ac") shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) [ 1660.066715][ T26] audit: type=1804 audit(1555611530.733:4584): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2349/memory.events" dev="sda1" ino=17275 res=1 18:18:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f00000000000000}}}], 0xffffff76) 18:18:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x2}) 18:18:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) fgetxattr(r0, &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/4096, 0x1000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x5c, {{0x2, 0x4e21, @remote}}}, 0x88) 18:18:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) 18:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2000000000000000}}}], 0xffffff76) [ 1660.273399][ T26] audit: type=1804 audit(1555611530.943:4585): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2350/memory.events" dev="sda1" ino=17277 res=1 18:18:51 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002b, 0x500001c) 18:18:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x4}) 18:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="f78bff0500000000000000") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0xa02, &(0x7f0000ffd000/0x1000)=nil) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x0, 0x800, &(0x7f0000000080)=0x1df}) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/4096) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/56) 18:18:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2100000000000000}}}], 0xffffff76) 18:18:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) 18:18:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1660.835441][ T26] audit: type=1804 audit(1555611531.503:4586): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1931/memory.events" dev="sda1" ino=17285 res=1 18:18:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2200000000000000}}}], 0xffffff76) 18:18:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x5}) 18:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101401, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0x58, 0x0, 0x7, [{0x4, 0xff, 0xe, 0x473, '/dev/ubi_ctrl\x00'}, {0x1, 0x8001, 0x1, 0xa5e, '@'}]}, 0x58) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x404000, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000040)={0x521, 0xfffffffffffffff7}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) 18:18:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x500}) [ 1661.164547][ T26] audit: type=1804 audit(1555611531.833:4587): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2351/memory.events" dev="sda1" ino=17277 res=1 18:18:52 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002c, 0x500001c) 18:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2300000000000000}}}], 0xffffff76) 18:18:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x1000000}) 18:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 18:18:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x2000000}) 18:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2600000000000000}}}], 0xffffff76) 18:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) 18:18:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x4000000}) 18:18:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") uname(&(0x7f0000000000)=""/68) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x428, 0x428, 0x0, 0x0, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000100), {[{{@ipv6={@empty, @ipv4={[], [], @local}, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'lapb0\x00', 'vlan0\x00', {}, {0xff}, 0xff, 0x7, 0x1, 0x1d}, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'erspan0\x00', 0x3}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @broadcast}, @ipv6=@rand_addr="14332f5ab7dd21c8542477fd99262f7e", 0x40, 0x27, 0x8}}}, {{@ipv6={@mcast2, @ipv4={[], [], @multicast2}, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xff, 0xff], 'veth1_to_hsr\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x80000001, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x10001}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x15}, @empty, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xff, 0x18cdf851a30c4fe6, 0xff], 'teql0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0xef, 0x7f, 0x4, 0x76}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x7fffffff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x95ffffff00000000}}}], 0xffffff76) 18:18:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x5000000}) [ 1662.535125][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1662.535141][ T26] audit: type=1804 audit(1555611533.203:4591): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1932/memory.events" dev="sda1" ino=17277 res=1 18:18:53 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002d, 0x500001c) 18:18:53 executing program 4: r0 = socket(0x1d, 0x0, 0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x50000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x7f, @empty, 0x4e21, 0x1, 'lc\x00', 0x1, 0x100000001, 0x4c}, 0x2c) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xb200000000000000}}}], 0xffffff76) 18:18:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfcfdffff}) 18:18:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) 18:18:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1663.035777][T10888] can: request_module (can-proto-6) failed. 18:18:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf00000000000000}}}], 0xffffff76) 18:18:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfeffffff}) [ 1663.068147][ T26] audit: type=1804 audit(1555611533.733:4592): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2353/memory.events" dev="sda1" ino=17286 res=1 [ 1663.097203][T10888] can: request_module (can-proto-6) failed. 18:18:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0xffffffff, 0x5}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffff800, 0x0) 18:18:53 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002e, 0x500001c) 18:18:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf401000000000000}}}], 0xffffff76) 18:18:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfffffdfc}) 18:18:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x1}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="edeb4a41") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000180)=0x40) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xff, 0x80000000, 0x6, 0x8, 0x12, 0x80, 0x401, 0x9, 0x7fcdfc7f, 0x1f, 0x7, 0x5}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x6104, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x5, 0x0, 0x2}}) 18:18:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) 18:18:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfffffffe}) 18:18:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfdffffff00000000}}}], 0xffffff76) 18:18:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x1000000000000}) 18:18:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfeffffff00000000}}}], 0xffffff76) 18:18:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) getpeername(r1, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000280)=0x80) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff07020002007fe35448afa81047c13b68d7ba11d9f35c607152050021701aaa5cf995c1b4a96a259e4beb1158a53d90c293b27a8634ddc3161e623f190c9e4aa13622d59959a0150b2788622afda900000000000000"], 0xc) [ 1663.907498][ T26] audit: type=1804 audit(1555611534.583:4593): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2353/memory.events" dev="sda1" ino=17286 res=1 18:18:55 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010002f, 0x500001c) 18:18:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) 18:18:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x100000000000000}) 18:18:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffffffff00000000}}}], 0xffffff76) 18:18:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000240)="00fca27746fed0783875fdf5ef") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c1241359bd070") setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0xff, 0x7, 0x0, 0x20}, {0xfffffffffffffff8, 0x401, 0x4, 0x180000000}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="e8"]) truncate(&(0x7f0000000180)='./file0\x00', 0x7) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x80, 0x2, 0x3f, 0x1, 0x3ff}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x9d, 0x4}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x80000, 0x0) clone(0x100000, &(0x7f0000000280)="8782ac4870ed317fe365e828b7cc53e543d2a925cf79ff846d6185d4783df6fd441964f5de0e4c7bcfec815ab590ebcbf8002c3908cad08b9b6bd41a081bf3c33990165f06df20bb53251ef5125a433612b1b76a4cb4bf773412c5f41e80a0c2a2ee6dde22a97ce752412f54be95e506f1e9cbd3bae558017f50525b8b60099591f5e6c1d80dd7d262af90437bc9b9a303e2f2b4fc369ed7f85c2912f718e6767c", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="9d31751e07f1bbb37f1602be9b3d57d008fba3003befee4bb5ee56243ada99b77e64f505cfcf37d73b66ded943bf779aee079271f72c8c9d04a0e496b1e2aabbf2") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) 18:18:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x200000000000000}) [ 1664.705755][ T26] audit: type=1804 audit(1555611535.373:4594): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2355/memory.events" dev="sda1" ino=17308 res=1 18:18:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x11fffff76) 18:18:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x400000000000000}) [ 1664.885028][ T26] audit: type=1804 audit(1555611535.433:4595): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1935/memory.events" dev="sda1" ino=16541 res=1 18:18:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) 18:18:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0x500000000000000}) 18:18:55 executing program 1: syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x450040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101, &(0x7f0000000080)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1665.548814][ T26] audit: type=1804 audit(1555611536.223:4596): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1935/memory.events" dev="sda1" ino=16541 res=1 18:18:56 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100030, 0x500001c) 18:18:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfcfdffff00000000}) 18:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xb, 0x0, 0x0) 18:18:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) write$capi20(r1, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x8000, 0x8}, 0x10) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xfeffffff00000000}) [ 1666.029530][ T26] audit: type=1804 audit(1555611536.703:4597): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2356/memory.events" dev="sda1" ino=17309 res=1 18:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xa7, "f6ebac0d74fc7a7dc5c6ff236ef9595536a2020ca1360b4d169ecc3a0bbf2c8ae595e098b18c27c4ae31f85d8494399fd584e8d5a507a3de9e0ea2c1ba35f5fcd60faa5f9e453eb91ece43bd5f866be832e7d7a09d9c1deb1e4c7af145db95c15278d4b5598382d605400f9a91d8ce2e9fb7ceef67317ba818aa540edd13154cde05231084cf3a2d5a0c889004357e405b95208848f76fc614062e9859282f8fbc8094e2a897c0"}, &(0x7f0000000080)=0xaf) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @rand_addr=0x7}}}, 0x84) [ 1666.140918][ T26] audit: type=1804 audit(1555611536.783:4598): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1936/memory.events" dev="sda1" ino=16544 res=1 18:18:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = signalfd(r0, &(0x7f0000000000)={0x9bfe}, 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x0, 0x7, 0x1, 0x1, 'syz1\x00', 0xde27}, 0x0, 0x8, 0x9, r2, 0x1, 0xffffffff, 'syz1\x00', &(0x7f0000000080)=['self(\x00'], 0x6, [], [0x20, 0x2, 0x7, 0x9]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x173) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000300)={0x0, 0x9, 0x3, {0xb, @sdr={0x3247504d, 0xffffffffffffff81}}}) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000002c0)) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000140)) 18:18:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xffffffff00000000}) [ 1666.712102][ T26] audit: type=1804 audit(1555611537.383:4599): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2356/memory.events" dev="sda1" ino=17309 res=1 [ 1666.819383][ T26] audit: type=1804 audit(1555611537.493:4600): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1936/memory.events" dev="sda1" ino=16544 res=1 18:18:57 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100031, 0x500001c) 18:18:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) keyctl$describe(0x6, r1, &(0x7f0000000100)=""/7, 0x7) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 18:18:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}], [], 0xffffffffffffffff}) 18:18:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\xa4R\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x00\x00\x00\x00\xe6\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) r4 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000140)={0x46, "33f782a66f15d5241062ae3b42ac68e460cea1c802d2c427878ecf738718c70acb80ae74c0cdf74cd31b91b1b21245162a993c2483ef723aa53a2f65e87d8f411c0eaf70092272a8d245b1b712f3a3bd3764e7fe9eb3a7c4feb0f1f6cd498ddd4800ad0fdf6f0b9fc65fe582c7a9113a2b08aa1a6aa6fea2b4cc58c59edee8ca"}) 18:18:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) 18:18:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x80000000, 0x7ff, 0x9, 'queue0\x00', 0x8}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x8, 0xad36, 0xaa, 0x36, r1, 0x1, [], 0x0, r1, 0x8, 0xe7}, 0x3c) 18:18:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x22000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x85a5, 0x0, 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x1}) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f676465763d2e2f7d684369af66696c65302c00ec1ae193d002e1d1a9715e93524fc83eeb8ffd524c3952f18a88f5917071fbe79987f2707292399f9a155a20ce43116a07c5399e4ebc6a7c79fa1316fde8297583aa3b5883f28f7939e66a72b403a7fd292b472d7e4d458659abe9f7f4e037e5ac3f8c27063124f8792e7439795581dd419f98191664b96bb27855"]) 18:18:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x40880) write$sndseq(r1, &(0x7f00000002c0)=[{0x20, 0x2, 0x7, 0x6, @time, {0xc672, 0x1f}, {0x75}, @ext={0xd1, &(0x7f0000000100)="a4a20baea97887f185e993a664d9a99d39cb5ebd8d3070775619152bd635775db84e390ef50925cd1a39c3eb7faad335347c77f94f4c9c8931ad507fda93ea244865f3ec0d9857070675aa422f3199f2b270c1ecc37a8056e9bf7199d92eb526289bb6a8848a5f63560b8035877c2bda4779dc30fea9a4150b3c646ed94692a904f359b8ade9aacad0de626c7e9043bca287dd7dc1873cb663f1bf22fd71c7b8094358f60954ae7e77d27a1f72fd042eefb57371092ced3e44e1da259dc4447bc7f2466094fef5fec8401147aa9fac5678"}}, {0xfffffffffffffff7, 0x18aa3830, 0x2, 0x2, @time, {0x0, 0x7}, {0x8, 0x3}, @result={0x100000000, 0x1f}}], 0x60) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:58 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100032, 0x500001c) 18:18:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) 18:18:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xb7d6, @mcast2, 0xf1bc}}, 0x100000001, 0xffffffffffffff07, 0x53, 0x7fffffff, 0x3}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0x10000}, &(0x7f00000001c0)=0x8) 18:18:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:18:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfff, 0x200) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) write$FUSE_POLL(r1, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x9}}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4400, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x100, 0x4) 18:18:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, 0xffffffffffffffff) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x3) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000400)=""/82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = request_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='vboxnet1\x00', 0xfffffffffffffff8) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f00000002c0)="8b2515627ea0b68634e88066c8fdd8ea7d573afa385bc89f7ffb5df2bbb5a90f0adee588cc0a849b34fd4e29775a9544a028ca763e47f99c4b15a36b86e9f92220cf83122971fd977220eae2fe4d03f0b1e487a322edeca56b513ae5b3877de13e7eff4ef0c2dd8f2805b836b6e6a98b403b4022", 0x74, r3) rt_sigreturn() write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @local}, {0x307, @random="d98659cd5269"}, 0x40, {0x2, 0x4e20, @loopback}, 'veth0_to_hsr\x00'}) getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:18:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100080890e, &(0x7f00000000c0)="0adc69123c127b8e9bd070c0ae46a21dff6fa2d3f8f4a28f20e621c6e7446514554c6542360468a14c6d407c906b766e2a482747818a03e2fb9d1965c32ea84fc65be2285a0ed397d0e0cc53e24b26630c3b497fdfafbea310f29ee9dfd0cee491858bbbe50da4f002517854a7dd8b7e0cfc35c6a8cce66179ffc07ed00fb309adb355c047d386400919b9945f570c156e25bcd560e6db2234a3580a902497255e7c409537f4353fc52cb10c18baa692321af9e090be40b6181cb184636827da5c9908e32ac3f9fb38c79f852686e5c1f56b96c9feadcb43a3fcab74d1245e2b941f9181585435075bd73b2af1918d98ce") shmget$private(0x0, 0x1000, 0x202, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x3000, 0x1020, &(0x7f0000ffc000/0x3000)=nil) r1 = shmget$private(0x0, 0x3000, 0x54000984, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1667.709864][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1667.709880][ T26] audit: type=1804 audit(1555611538.383:4603): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2358/memory.events" dev="sda1" ino=16538 res=1 18:18:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:18:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x0, 0x0, [0x3f, 0x3f, 0x3]}) r4 = getpid() r5 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r4, r5, r6}, 0xc) 18:18:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) 18:18:58 executing program 4: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100028, 0x500001c) 18:18:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f2d32a302bd1ce3be72f2b8bc3c804e43e17494e0a2f884e067d14aae2764f21e36b118b7695dfd4fd21b3069489e907698e5d09e947c343b92f1998aca1aca36cc6567c84e00"/85]) [ 1668.178417][ T26] audit: type=1804 audit(1555611538.853:4604): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293315394/syzkaller.S9T9RZ/3139/memory.events" dev="sda1" ino=17319 res=1 18:18:59 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100033, 0x500001c) 18:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="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") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:18:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000080)="0adc1f123c12f37b9bd070") syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x3fffc, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6f65d9ea3f676465763d2e2f66696c"]) 18:18:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc0, 0x0, 0x0) 18:18:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1668.700622][ T26] audit: type=1804 audit(1555611539.373:4605): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1939/memory.events" dev="sda1" ino=17312 res=1 18:18:59 executing program 4: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100010, 0x500001c) 18:18:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000040)='nr0\x01:\xf2.\xa3\'>\xf8]\x81$?\xfa\xbf1UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc3557e556e8eb91d13b1aa13b773b3f3c") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logde0,\x00']) 18:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0000df143ec42b383691c563edebe85a2e2f90a660a6574d74") r1 = creat(&(0x7f0000000400)='./file0\x00', 0x20) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=0x0) write$FUSE_LK(r1, &(0x7f0000000380)={0x28, 0x0, 0x7, {{0x100000001, 0x5, 0x3, r2}}}, 0x28) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000140)) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000100)={0x3, {0x2, 0x0, 0x8e79, 0x8}}) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r6 = dup2(r5, r3) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x64002c00}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x24004840}, 0x8004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$cgroup_subtree(r6, &(0x7f0000000300), 0xfd7f) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000003c0)={0x8, 0xffffffffffffffc1, 0x0, 0x2}, 0x10) [ 1668.905455][ T26] audit: type=1804 audit(1555611539.403:4606): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2359/memory.events" dev="sda1" ino=17293 res=1 18:18:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x300, 0x0, 0x0) 18:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) pwrite64(r1, &(0x7f0000000080)="761e9a74076f1c5d11cb34713c2e8215027a4186ecc4a7d955c757eb5610ded35425f3bde7a14a3b235a251de0bce474", 0x30, 0x0) r3 = dup2(r2, r1) fcntl$notify(r2, 0x402, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1669.100424][ T26] audit: type=1804 audit(1555611539.773:4607): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293315394/syzkaller.S9T9RZ/3140/memory.events" dev="sda1" ino=16538 res=1 18:19:00 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000100)="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") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040)=0x5, 0x4) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:00 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100034, 0x500001c) 18:19:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x500, 0x0, 0x0) 18:19:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x9c, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6fc196aa6014950dfabdfac60a5d02"]) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x800, 0x40900) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="8de2e728298be0a974ee327e92a8bc1d13e0018660207919a37010a0c9c471dfc8f8ae08e986899bb33606e2aab9e02745fde7b8ea3044e02ad39b1ea061d3d0f35dd824beec9509aec2e852d2385e21e1e60e4fb7f5dda77d07d772926b5e84ab126af7", 0x64, 0x3}, {&(0x7f00000001c0)="80f8191337db4646f67376908b7b33062f28646b31d339688c4f65e5ed8e6799462c6c3470b6ca3558c54cb48162133adbd153de09201842512d7a11b99fe4b1a255806699c9d0df6ec4e25a3273463915f972bc766284962e5a50c85efaddd955a84143fcf106a3bc9024895c02629ca09c72cb2787736c3fac3cb1b1bbed8ac0ad8b60be63115fe02da0623384513dc2717c82ab26504960afa80fc0d3fa2d9c28db43bbac10a6788fb5b9ce0cbf8fdc1e7bcec79fc1e3afc668c4da22bc7c9e6e50db9e464ded39ab460077896faff94f9a16a98e2d", 0xfffffffffffffe45, 0x2}, {&(0x7f00000002c0)="0d4db1d2d355d9b9cb0a676e11c2060200fd312a46773a5ce229a6921b93a8042f882c399896f43d0a14c440adf2bf6d4e3ebfa5efcf8cc1819c6a52cc90d091322109d445b6c44beac020ecd7fd22eb2ad827c7f6bb827d39aec55b4b294871550807e34b4ce2fc4a143e4c95c3ae70ed99ef4cea7b086bee3ad1e9c6063baf9e60b5a2ea1b6f4e5958207981496d16f004e267625b6c1f7e65f7322454d27672066a09", 0xa4, 0x6}], 0x80, &(0x7f00000005c0)={[{@compress_algo={'compress', 0x3d, 'no'}}, {@space_cache='space_cache'}, {@inode_cache='inode_cache'}, {@nodatasum='nodatasum'}, {@noinode_cache='noinode_cache'}, {@nodatasum='nodatasum'}, {@degraded='degraded'}], [{@context={'context', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'vmnet0*(#ppp1em0'}}, {@obj_role={'obj_role', 0x3d, '/dev/bus/usb/00#/00#\x00'}}]}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000540)={0x4, 0x7, 0x0, 0x5, 0xff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r3, 0xff16) 18:19:00 executing program 1: accept4(0xffffffffffffff9c, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x3f, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000040)={{0x5, 0x4}, 0x0, 0x3, 0x8, {0x7, 0x5}, 0x7, 0x80}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1669.704983][ T26] audit: type=1804 audit(1555611540.373:4608): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1939/memory.events" dev="sda1" ino=17312 res=1 [ 1669.844158][ T26] audit: type=1804 audit(1555611540.513:4609): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2360/memory.events" dev="sda1" ino=17293 res=1 18:19:00 executing program 4: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100010, 0x500001c) 18:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$rose(r0, &(0x7f0000000100)=""/175, 0xaf, 0x10002, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1669.955264][ T26] audit: type=1804 audit(1555611540.593:4610): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1940/memory.events" dev="sda1" ino=16541 res=1 18:19:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x600, 0x0, 0x0) [ 1670.278193][ T26] audit: type=1804 audit(1555611540.953:4611): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293315394/syzkaller.S9T9RZ/3141/memory.events" dev="sda1" ino=17320 res=1 [ 1670.694484][ T26] audit: type=1804 audit(1555611541.363:4612): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2360/memory.events" dev="sda1" ino=17293 res=1 18:19:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x700, 0x0, 0x0) 18:19:01 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100035, 0x500001c) 18:19:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0ad869123c127b8e07d070f525f45731f491ee586ac78bf30df7150254371ca3323f62640a57757894944578e3a17ed293a345e971b0a7c61f00000002518c27fc269319a6cbe25618934067b8d9c1978ccf9711edfc2b97223b70bd68972b9e0cfef4ceb5") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockname$ax25(r1, &(0x7f0000000180)={{0x3, @bcast}, [@rose, @default, @bcast, @remote, @default, @null, @netrom, @netrom]}, &(0x7f00000002c0)=0x48) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0x104, @time={r5, r6+10000000}, {}, {}, @connect}], 0xfffffffffffffead) 18:19:01 executing program 2: getgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, 0xee01]) setfsgid(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x402, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f29642788d9c52f6669822c00"]) 18:19:01 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100036, 0x500001c) 18:19:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x100000000000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000080)=0x2000400000000, &(0x7f0000000100)=0x4) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) accept$ax25(r3, &(0x7f0000000140)={{0x3, @netrom}, [@null, @null, @default, @rose, @remote, @null, @rose, @null]}, &(0x7f00000002c0)=0x48) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@default, @default}) 18:19:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x900, 0x0, 0x0) 18:19:01 executing program 4: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100010, 0x500001c) 18:19:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='lo\a\x00\x00\x00\x00\x00\x00\x00ile0,\x00']) 18:19:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$setstatus(r0, 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0x3ef) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@logdev={'logdev', 0x3d, './file0'}}], [{@dont_hash='dont_hash'}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, r1}}, {@euid_gt={'euid>', r1}}, {@fowner_lt={'fowner<', r1}}]}) 18:19:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xdf, 0x8c00) [ 1671.504859][T11273] overlayfs: filesystem on './file1' not supported as upperdir 18:19:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x86000, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa00, 0x0, 0x0) 18:19:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) fsetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374659070ff5c6a917b78"], &(0x7f0000000100)='\x00', 0x1, 0x1) 18:19:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xff, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, [], {0x0, @bt={0x7, 0x401, 0x1, 0x3, 0x6, 0x8, 0x6, 0x7fffffff, 0xfff, 0x167f, 0x9, 0x4, 0x6, 0xff, 0x1, 0x2}}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x31e, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6c5a69e55ccb0004e9e4a14ff3c91257b396153e9300e2a83b1481c2b33d000000"]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x2, 0x3, 0x7, 0x1, 0x8}, 0x4, 0x7, 0x40}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={r2, 0x0, 0x2, 0x7, 0x2}) 18:19:03 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100037, 0x500001c) 18:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000180)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0xfffffffffffffffe) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x40}, &(0x7f0000000080)=0x8) write$uinput_user_dev(r3, &(0x7f0000000740)={'syz0\x00', {0x7, 0x100000001, 0x10000}, 0x1, [0x8, 0x81, 0xffff, 0x4, 0x401, 0x4, 0x2, 0x9, 0x1, 0xed, 0x5, 0x2, 0x0, 0x7ca2, 0x1, 0xcb2, 0x7346, 0xb24, 0x5, 0x0, 0x1f, 0x100000000, 0x85c, 0xfffffffffffffff9, 0x1, 0x100000001, 0x10000, 0x9, 0xffff, 0x6, 0x2, 0x4, 0x5, 0x7ff, 0x1ef6, 0x5, 0xa9bb, 0x9, 0x0, 0x7, 0xffff, 0x401, 0x0, 0x2, 0xc7, 0xe1becbe, 0x101, 0x100000000, 0x7, 0xc0, 0x20, 0x101, 0x7, 0x1000, 0x20, 0x9, 0x1000, 0xfffffffffffffff7, 0xb7, 0x2, 0xa1c4, 0x3, 0x2, 0x2], [0x20, 0xe4fa, 0x3f, 0x2, 0x30f0, 0x3ff, 0xffffffffffffff8c, 0x0, 0x8, 0x8, 0x6, 0xffffffffffffff1a, 0x5, 0x81, 0xffffffffffff8001, 0x4f16, 0x400, 0x661, 0x4830c8c, 0x3, 0x9, 0x4, 0x7, 0xfffffffffffeffff, 0x7, 0x81, 0x4f736feb, 0x10000, 0x4, 0xffff, 0x0, 0x5, 0x81, 0xc1a7, 0x200, 0x7fffffff, 0x1f, 0xffffffffffffd0f2, 0x0, 0x6519d846, 0x2, 0x7820, 0x1, 0x8, 0x0, 0x9, 0xfffffffffffffff8, 0x5, 0x3, 0x8000, 0x2, 0x82be, 0x3, 0x2, 0xfffffffffffffffc, 0x401, 0xe9fa, 0x1, 0x7ff, 0x1, 0x2, 0xfa1, 0x6, 0x7], [0x4546, 0x1, 0xfffffffffffffffa, 0x7646, 0x8, 0x6, 0x3f, 0x9, 0xfff, 0x40, 0x3, 0xd5, 0x9, 0x6, 0x9, 0x8000, 0x5, 0x1, 0x3, 0x3, 0x0, 0x8, 0x1000, 0x6d, 0x40, 0x8, 0x8, 0xfffffffffffffff7, 0x101, 0x100, 0x5, 0x49fc, 0x5, 0x7, 0x8, 0x7, 0x7, 0x100, 0x3ff, 0x80, 0x9, 0x1, 0x4, 0x7, 0x8, 0x101, 0x100, 0x80000000, 0x9, 0x6, 0x7, 0x5, 0x8, 0xffffffffffffffc0, 0x7, 0x8000, 0x8, 0x7ff, 0x1, 0x5, 0x7ff, 0x0, 0x6, 0x6], [0x401, 0x3, 0x200, 0xfffffffffffffffb, 0x200, 0x0, 0x3, 0x3f, 0x8, 0x0, 0x4, 0xabdc, 0x5, 0xfffffffffffffff7, 0x6, 0x299e1151, 0xfff, 0x80, 0x4, 0x9, 0xffffffffffffffe1, 0x5, 0x9, 0x6, 0x9, 0xffffffff, 0xff, 0x21, 0x8, 0x4, 0xfffffffffffffff7, 0x9, 0xffffffffffffb95f, 0x7fffffff, 0x3, 0x51e3, 0x9, 0xffff, 0x1, 0x1, 0x2659, 0x1, 0xf22, 0x7, 0xff, 0x3, 0x1ff, 0x5, 0x6, 0x4, 0x0, 0xb21, 0x8001, 0x7, 0x80000000, 0x19c8, 0x3, 0x3, 0x933, 0x1, 0x4, 0x745c, 0x5]}, 0x45c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="dc3b571bdebdc621cda05a0b6edd267ee5"], 0xc) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x80e0, [0x0]}, 0x6) 18:19:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xb00, 0x0, 0x0) 18:19:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x7, &(0x7f0000000180), &(0x7f0000000000)=0x68) close(r2) close(r1) 18:19:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @broadcast, 0x4e22, 0x3, 'ovf\x00', 0x3e, 0x91, 0x3}, 0x2c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f00000000c0)=""/16, &(0x7f0000000100)=0x10) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41001000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x5, 0x3, 0x204, 0x70bd2a, 0x25dfdbfd, {0xf, 0x0, 0x5}, [@generic="deb48017c3f16fb40ee7f16ccbba30e758b24da233fa01cdb063f517c0b620d2742214048b953d49b1bd36636f96c6c78a533f7b653fa328c788925462dfebc2"]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1672.598743][T11330] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1672.634742][T11330] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 18:19:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9e, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.staW\x00<#\xfbW*\x1f\x02\x14\xfe\xd4L\x98\xc2\xa1\x94\xe6\xf3\x00\xb4\x1a\xf4.\x84K\xa3\xd2\x15\vB\xdc\xd8\xa5A\xf9>\xf4\x88\x88W\xd5KM\x9d\x9a\x1fc\xf8x\xd2\xf2\xf7\x88\x8e\xe0,e+:G\x1bj\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\xc7\x00'/115, 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 18:19:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd00, 0x0, 0x0) 18:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x34000, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000240007011dfffd940101830020200a000900000000000004000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='l\b\x00\x00\x00\x00\x00\x00\x00file0,\x00']) [ 1672.785232][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1672.785249][ T26] audit: type=1804 audit(1555611543.453:4618): pid=11298 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2362/memory.events" dev="sda1" ino=16689 res=1 [ 1672.883416][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1672.922760][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1672.952983][ T26] audit: type=1804 audit(1555611543.623:4619): pid=11350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2363/memory.events" dev="sda1" ino=16945 res=1 [ 1673.167330][ T26] audit: type=1804 audit(1555611543.833:4620): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1943/memory.events" dev="sda1" ino=16706 res=1 18:19:04 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100038, 0x500001c) 18:19:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) write$binfmt_elf64(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfffffffffffffffe, 0xffffffffffffcd38, 0x1, 0x5, 0x3, 0x3, 0x3, 0x1d4, 0x40, 0x19b, 0x3ff, 0x100000001, 0x38, 0x1, 0x3ff, 0x20, 0x4}, [{0x3, 0x6, 0x80000000, 0x10001, 0xffff, 0x8, 0xd182, 0x40}, {0x7, 0x1e4, 0x7fff, 0x100, 0x5, 0x80000000, 0x6, 0x100000000}], "4242a58cd4b5b000fe6595350ddfc97644d6c03459d50738aa932ea090492bf8dc5b018646c49133c55e995157f286482a2784350b134b064efd44cebd6bfd7f71f03412c7457e273029919b4571b6d5d3bd8ba13a68f4f35602a636a7253153090864fc1649a1d8dab914ffd16464bcebad92abe9231aa07229658ebda09ed5b551206535f867e310f15be35aba7359d33690e7d66a630f3aa9729525aa2bb0f6d61722172900311eb53f854e92da1866eafb5e51c1", [[], [], [], [], []]}, 0x666) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000005) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 18:19:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xa, &(0x7f0000000140)="fedc1f123c123f319bd0709d83df8e348232467f8f2dafa19884ce24cedc6d99eb5493b3982a88d1e576f13b6f866c91aaf2058a6bc400e9e426e4c1d61a5632c0ac6c176924e8f093eb80be8bdb990c4a5083f4b01f9548ac3f6bceb91e5147b58e0523567f9633c6b75a5d04b913b4a06f02860e38081783a94b6d91813f86699ecffc17d2e96e6b8868f7ab76448b07a3877301df8088577947c353f55c43e547a4eede00a30b8002da50935dc2b97cf0399a") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1400, 0x0, 0x0) 18:19:04 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0x100, 0x4) write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:04 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="95abc62cf441a80a34825dc2d17c2065be4c545624cc97cf4646ffdf51c5b08c27c100a1cb805ebf56acb73565a84bddeb9425223b6595dce4273c979f909935b5a261466040400882f9be93101e1b41e7b51d15c5c8d685791c6626a2ac41c8c21ddab25c88cb369df1fa1d7e6626", 0x6f, 0x2}, {&(0x7f00000001c0)="734e747dd4b1cd1be91fabfddfe698a65658545644d5f044fe439e5bcfd527b37cdd460c9835c306457b56e8c4", 0x2d, 0xfffffffffffffffe}, {&(0x7f0000000200)="1754a8fa7c675392c8608deec1c95e9a2d52445293400884c919b23a789c6d895a73357e8ee28cf480972d2e36683460dd", 0x31, 0xffff}, {&(0x7f0000000240)="aadda9da3442713b4bdb7583036977e83a91551114156662b4d68a2f8c3aeb67756afa745c460b14ed2203097930a22d91e6aad5d98cc679e020d50415b706ac76bbae209fcde03eb3e48a9108e943d396d1445cda8c4669e8da925d7bc1d5c3d3eb6301b304aa308be47eac8dddd1ccccd2eafa8783295810070044cc77f32f1bfb97311d218192a49bd546d87d1eeca32f5b9d1da6b0df5cbde8c8cf0c97128b15edffb3a5eb1bf104d9b3967e9d71734063", 0xb3, 0x6}, {&(0x7f0000000300)="47efddc69d8e4505c493d512bb8c439c78420d4322e1dc976d473e42b7258db012ff109e0059e1cd742b672d9744252ec1fec8717b7590f6c6803ff4fd5c52b606e65cd3b7d38d8a711bafd84fbb6a570ff833e7f159106c9726cb6edc7ceb90dfa6600c1f8deccd44ed3b9ce6972bb5005a788e2834705dc99cdd62b0d072e856453c6e29d5612c6aa7bd2b7f14d13fb754b5c4d64e19083d335c77aa24ec6f5da0c975bd95857f1dd130e7de3e08540599dbc92b0220f7c3efca2105a7c0fa7a2a72b9d21275d7066d584a54a57876c64c99229bc0c6ea41", 0xd9, 0x5}], 0x40030, &(0x7f0000000780)={[{@noalign='noalign'}, {@grpquota='grpquota'}, {@noalign='noalign'}, {@logdev={'logdev', 0x3d, './file0'}}, {@logdev={'logdev', 0x3d, './file0'}}], [{@uid_gt={'uid>', r1}}, {@fowner_gt={'fowner>', r2}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'selinux'}}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1673.560330][ T26] audit: type=1804 audit(1555611544.233:4621): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1944/memory.events" dev="sda1" ino=16913 res=1 18:19:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x200000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) syz_open_dev$mouse(&(0x7f0000000600)='/dev/input/mouse#\x00', 0x1000, 0x8400) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="c8c698c6ef6b286993898a6e0e5e53d2559ba1aa00a3973268a2d740e9274027ff4bb60fb381d5b98789ffe20a431b2d9c3fea26e7679fe8e2a61f53e3b789687f592ac05e5661a0a157ab0b20a65e78c03dc0c13a7d007510635c61850fd5189ac4ae7a9610a6ec5ed0359e31570bc65f4bcaf3e48d6e93047f7b62803928d2a7b14fa8a6fb477254ff414609fad5b974853183d405739e697f40cf305ec6dadf4aa4a1af11af7ccabfc72e24ac431ea7a7fb917cf7475637425528ef228edc76c1ea3ddc180b65b886fe8db5eda366ec7a912addf9f45c83583acd83bb8348532fa6fcc976f0a9660d0cef", 0xec, 0x7}, {&(0x7f00000002c0)="56c0a368dc619709e72404573fb8dbf3a798775791eb9b17082c379ea4164b0d26246c272d1818de9e34ff37b253f0546cface74a251bc0568a299bb16a511b1a78c789bb67674abbad059e42f28276c564cf43f3f35be57c97d5bc811481cffcbeccea556af815ac0b0f32e84", 0x6d, 0x6c56bd55}, {&(0x7f0000000340)="1112860d3aadd0d28e430d547cac922a0aa569019ff5ffdb141edc6aca958bc63ff4b3ff876cf909412fef266ef6890a55920f48d3fd4343", 0x38, 0xd1}], 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6163725f78617474722c61707072616973655f74ffff653d696d617369672c666f776e65723c49ecd90a55b273cdc5c4d3369c5e4731b451e1548fb3", @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x0, 0x400000) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xe7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbb}]}]}, 0xb8}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@pptp={0x18, 0x2, {0x2, @local}}, {&(0x7f0000000080)=""/28, 0x1c}, &(0x7f00000000c0), 0x50}, 0xa0) ioctl(r1, 0x0, &(0x7f0000000200)="38296dad7bae96a38868ef2beabef509df42a7db6ee9f9372637d6e64e00cae23abd06560498959e089a9532184871c3f67c") 18:19:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 1673.694498][ T26] audit: type=1804 audit(1555611544.363:4622): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2364/memory.events" dev="sda1" ino=16945 res=1 18:19:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) [ 1674.218544][ T26] audit: type=1804 audit(1555611544.893:4623): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1944/memory.events" dev="sda1" ino=16913 res=1 18:19:05 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100039, 0x500001c) 18:19:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="676465763dae2f66696c75302c000000"]) futex(&(0x7f0000000000)=0x10000000002, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x1) 18:19:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 18:19:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f00, 0x0, 0x0) 18:19:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f676465763d2e2f66696c65302c004ac46bc8cbcecd2d754815edfc20fcfaa1fe36b8498372e6a6a8db200941cb0bea489063c76a0c783294757da330a0d9eee81ab8a8665956362796886e8c40"]) 18:19:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x4804) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1674.649378][ T26] audit: type=1804 audit(1555611545.323:4624): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2365/memory.events" dev="sda1" ino=17327 res=1 18:19:05 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010003a, 0x500001c) 18:19:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00@']) 18:19:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 18:19:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) 18:19:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc40e042d6da2e552873") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4000, 0x0, 0x0) [ 1675.441251][ T26] audit: type=1804 audit(1555611546.113:4625): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2365/memory.events" dev="sda1" ino=17327 res=1 18:19:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logdev=./fi,\x00']) 18:19:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x8001, 0xbe) 18:19:06 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x9) flistxattr(r0, &(0x7f0000000140)=""/104, 0x68) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffffffd, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000040)='queue1\x10\x19\xc6\xdc\x06\xabt4N\xc0\x97\x9d\xdf\xe0&\xc3\x00\x00\x00\x00\x00\x00\x00\x001S\xae;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/80, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1675.672844][ T26] audit: type=1804 audit(1555611546.343:4626): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2366/memory.events" dev="sda1" ino=17327 res=1 18:19:06 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010003b, 0x500001c) 18:19:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(0xffffffffffffffff) 18:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f763d2e2f66697e6530090000004006115820d0ceb85be78ef13f2f9703ed586af658eb01f1cf7e213c5e9c83873dd49beba04e91bc25003b4c8967c1a5a162077e2205a9ef52b5a70df8d8ece851bdaeca1ce8b7dbf2f7c60a706f6f6b78b9ddb6ddde6a1117dd63451f66a8a992e63411f8098ac880061e8154aa0baeb479c74cb989e351a4a7178e01def5a0cf0ef25cdea89a686b40a2b35299f30d4c6d86e179012a5139d45adf70e1d252c4f2fc9927f700a89ef5319a0315826b4a90cdb93690fbbc65946a7a285aa135731f8beb8183a145de96ab096f7fabd41592de59a19ce9fbb275ba8f"]) 18:19:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5000, 0x0, 0x0) 18:19:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(0xffffffffffffffff) 18:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3a4, 0x8000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000100)=[{0x800, 0x3, 0x21147cd4, 0xd15, @time={r3, r4+30000000}, {0x2, 0x8}, {0x1f, 0x5}, @connect={{0x0, 0xb}, {0xfffffffffffeffff, 0x3ff}}}], 0x30) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r6 = dup2(r5, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1676.020808][ T26] audit: type=1804 audit(1555611546.693:4627): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1947/memory.events" dev="sda1" ino=17325 res=1 18:19:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4c6f676465763d2e2f000000000000001c9ecabd673cf50703dcde73fc31740edbd2fb46d39adbeb570a187a2751b777609859188bb9b9f30cbc07dff97aa57a2fb806ea17499e7a3e04a0a9c24edccb0d19215530eb05f531256c33022ba01dda3c7d5c21c6c7b9ae37f87f774f8e3b568092426fc4e9db1af656303505fa655df2c27062fa033f9a252a8524505d2ed84a93a73ffabdedf4f9cbaddbe1f2de536e376a47934e1098a84c5f798e80ee1b189c66be2ee052a9101bafc6b594c9ba24d813391f253871ab43bd2c862e8d6a1da37b21c5f0257fac6804415e022b266a9372fa6e59fb958ed6b1876c941d41a0dd6d5b"]) 18:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x80000001, @loopback, 0x6}, 0x1c) 18:19:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6400000000a023d2071b925f480000007932"]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 18:19:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') close(0xffffffffffffffff) 18:19:07 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010003c, 0x500001c) 18:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/mixer\x00', 0x280000, 0x0) r3 = fcntl$getown(r1, 0x9) write$P9_RGETLOCK(r2, &(0x7f0000000e00)={0x21, 0x37, 0x1, {0x2, 0x0, 0x9b68394, r3, 0x3, '!/$'}}, 0x21) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r1) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x8000, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) mount$9p_xen(&(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10, &(0x7f0000000500)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl='posixacl'}, {@nodevmap='nodevmap'}, {@privport='privport'}], [{@subj_type={'subj_type', 0x3d, 'queue0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}}, {@uid_gt={'uid>', r7}}, {@pcr={'pcr', 0x3d, 0x2e}}, {@permit_directio='permit_directio'}, {@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, ':*wlan0)usercpuset-vboxnet1security:bdev#lo}'}}, {@dont_hash='dont_hash'}]}}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) msgget(0x1, 0xa0) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000100)={0x73, "84268c9102a9d602207b4301b0e382d80cb853fa5681c94a9b96702b26adb5872f1fadd5666cae6f3f6d09a8565a9f586819ddb8371fa576ec8a2c0f6e61cb1b14b4ff2936685272d8d92a85499ec61d76852e319bc9e48a09b9cefe876dd5fc8f03934b17e7b99db2c06901f8b6622b9a0207abf9fd49a3b0c9fd06facf8617"}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000cc0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @remote, 0xdb}, r8}}, 0x30) recvfrom$llc(r5, &(0x7f0000000d00)=""/78, 0x4e, 0x21, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1348], 0x544) syz_open_dev$audion(&(0x7f0000000d80)='/dev/audio#\x00', 0x0, 0x50000) clock_gettime(0x7, &(0x7f0000000080)) 18:19:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60ff, 0x0, 0x0) 18:19:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:07 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000100)={0x0, r1, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6c8d676465763d2e2f666a5f726f6c653d2cd865746830545d626465766367726f75705b276554302a6d696d655f74797065707070312c636f6e746578743d73797361646d5f752c6f626a5f747970653d7075742f6d636f6e746509000000797361646d752c0000002000000000400000000000000000c77104b0035ba46fd2ceb3325d13fcfa4b4beb14165680879a007f87968a1b64e3f63993b15404d44610538396859477cac050b5119ed084c0c1f3095baa91cb4bad7f9fcbe76a483a005618ce3ce161c3c2d97d61316e52992c9727dafbb97e30b81d98a9ea712b3602d618b33a81a7c4b347743972bbeca6f334c706db1c98"]) 18:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000300)="0adc69123c127b869bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x100000000000001) write$P9_RXATTRCREATE(r0, &(0x7f0000000340)={0x7, 0x21, 0x1}, 0x7) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x80, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x101, @local, 0x6ce3}, @in6={0xa, 0xffffffff80000001, 0x78bf, @rand_addr="cbc3aac9684a87700999997583fcf217", 0x1000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0xfffffffffffffff9}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) personality(0x1000000) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x200, 0x400) 18:19:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7400, 0x0, 0x0) [ 1677.828580][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1677.828595][ T26] audit: type=1804 audit(1555611548.503:4633): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1948/memory.events" dev="sda1" ino=17314 res=1 18:19:08 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010003d, 0x500001c) 18:19:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="f95faca33d65bc1ad3dff8f230d42fc5f97b7d8509d47074e44d2c032863057c7b39915fe85badf5763088672bed37524c6b4df636a2f5059ab9f013824e13f6d766a409a0fc42aaa96d5db1f661d70cd05ca383a55b35ab287e9501026ac16b96162abd9dcf507a9a904b968eaa6144d0351588204c14f7d802a2075aa678040153bf692d64b989c5e835ab25b86e45d89149b46091c71e1f4270e2e77612b47a24dce8ecd84c845f934c7f655e8842078b5dfad0b67f05cb7ceaaeb22162a378d41d778fdbc8291c714011d2e3916607f4cd7c2a6f6736a6c22d5e71ef658f233d004387d88fec15ae2d", 0xeb, 0x7fffffff}, {&(0x7f0000000300)="f59a829317174cefda5858ca93012c46d45abe83d5e60e37a62e2c784712e51c0b44ca96a8da26bb51ff49f1444f9bd471c97fee814ab78cedf58c6bad4927b604721658b8320425ebc623640156458a5d59ee6f94e7a0afd17428f174acd1d071521b380d161a4fc67c00f01f5fa09823e8bc0b569647080a95aab425d3ef5940bda52c75e2e23181839602700fba164654c66d56bbfb33e050c93a6dc8c14b1e77e3d7f68e7f61fd91f5f64db788d3e912d3e8d536f4398d07b1bf278edc83a3afdedc10dd883eb863d4", 0xcb, 0x100000000}], 0x0, &(0x7f0000000600)={[{@uid={'uid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}], [{@fsmagic={'fsmagic', 0x3d, 0x4cd}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xfs\x00'}}, {@smackfshat={'smackfshat'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x100000000008) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f67b0bb609a27db6e576c65302c008bb44a7e1e6dc9972c526b3c8808dff78935b24121b617b1c9ab1f3aac7313b8a6bbc205908c7df4f238fe7507d491dc20ca64319534407038b23788e70b3f2c8e7fc154e484a7c914fe7209dd17574c95ccd3d4575bcb90f68a197aa4555161bce7a0695ab9ce105ab3fbf737d9634b22083a0b2b349c1350dee2b7e1141be449fdde6ff1a045eb79482b0621912e82f81b7af56c1590350e03cc606383e155693d52e91705c987e661be647f37210a28575c1441"]) 18:19:08 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00'}, 0x10) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @connect}], 0x30) 18:19:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9400, 0x0, 0x0) 18:19:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1678.343077][ T26] audit: type=1804 audit(1555611549.013:4634): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2369/memory.events" dev="sda1" ino=17325 res=1 18:19:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:09 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010003e, 0x500001c) 18:19:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f6ffffff00"/16]) 18:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x4002) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0xffffffffffffffe1) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x2) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000100)={{0xc2b9, 0x40}, 0x1, 0x8, 0x1, {0x180000000000, 0x2}, 0x200, 0x40}) dup2(r3, r2) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xa40a) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='b'], 0x1) ioctl$SIOCNRDECOBS(r1, 0x89e2) write$eventfd(r1, &(0x7f0000000200)=0x1, 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0xa07000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:09 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000, 0x0, 0x0) 18:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") fcntl$setlease(r0, 0x400, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) pipe2(&(0x7f0000000040), 0x80000) 18:19:09 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1679.044912][ T26] audit: type=1800 audit(1555611549.713:4635): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=17325 res=0 18:19:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', ':+self.procvboxnet1*\x00'}, &(0x7f00000000c0)='xfs\x00', 0x4, 0x3) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@noikeep='noikeep'}]}) 18:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a050000fe344126cd76baad7259e2793e765680112ad87fa03407bf90ffad4f8cd49151571e0c50bc") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @loopback, 0x5}, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x24}, 0x6}, r2, 0x4}}, 0x48) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) sendmsg$netlink(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)={0x11c, 0x2c, 0x73a, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x1f, @fd=r0}, @typed={0x8, 0x2a, @uid=r4}, @generic="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"]}, 0x11c}, {&(0x7f0000000740)=ANY=[@ANYBLOB="40130000310000082bbd7000fbdbdf25a8104f00515bd977631e6bc2129421b5e8ea2019c4cf3a737db46b84080ad9a29808d5abbf0a4f1c4058b4a53ee6d8267df48ab4ef2bfb9961df0de25def8f97ab2f9e9c4dd21bc31480fe9fbd1e6b8a4c205bec832c200aafc92b6df24a2d4dab92ff25eb1c7575c4345b273b8f59b15de178cdaeddc5370eb3bb05caa83865d3b669d9f9a6db40125e4a8c6f82754fe39d71772483e197db793cd82f1416479a0b782126d56e0c6af1e966620f67fb62a4b409216b877992bcbfacbae243b0d8ab5bdb70bf33251cdb228308781a7a089c1c63d3ad5a16c8fd002d94d6f8413ddbd53b62c1d29213ca0c250ab3806339eac241a41b33ca3dcaaf68a01c47f853de89ba1b1a026cc9c3da36afe65a5420cfc7ca043ec7c30b404558522e16f6957eade21896a318b5143aa48b99ada7b428dbb0dce7fa7b9e10bdea8c6b6cd558b2ac007e7b43329a850928c9702d151af811096c46e6090bc45d653474d31484986d6f7a8451f3fdf55a7a9b5d13f09500d1f81ce84f7dcf954783283834cf9cdcc8e438499255b91c7f591a99dc896bdcb973ab6c3c1493e6f9c3111542ac9a2da7b8aca9a8cdd83577c15915d0e9a24cf6e842a2051b0c6f2f329275e2ed12790d21b3425de4dbc7ad66b3fdaec2d9d510e2294cbc4b1197cea61f19c7c553fd20d4a3f02e3827e850c0217e06ea896a64dd5e1da42e4f62fb089ca3ed9bd02c914f2a7ad455e8224e0fc435ed32aec8e6401e5d4fbd8935a7ed34de3375d506d4d20ca1e3a0594dac3d25c4a96c520a1d4246a6abfdade96b8df93e34af8367c55921b50b13812b5157f774d4cb751ae1a60bb21a35343aa35d1369778bfb17d8626445be4a2777876ff9552abcfea4b2313fb5f7cfa8697a638575ffabf86bab91036b058fd5843b8569005fb2c32691b70f34e2f435c7ffdc49aa3088b909780746c72f51949186b6e27d9f8fccf61a2be5ccb4589603a26a0c86637b7ca271e104b818ca4f68966bc2ec273fce8a46bcff797a6c9797cc770fec62817943ae0989048ccea95b243d289569ab63c4744457858809b264c17fd537c6a1f5018c8bb3cc2a0f2039c85d18039e4f3f8436b2bab2f46712a7cf09f107e5c6de09a456ff51836b98abb9af654e593c11f16aa87f66b7ab9d597b40141e06e64827467f041938bfc8b90e75407aa26e9a45a86974557f48de3193f1733e6d27a9ffd5fdc10e1ee3f90e7153446dbe975bc3e2dda12c09c98a6dcfd99e104bbf3bac86cac8e2cdace3e20d05fc321db4d4d41b8879fde7a3a0926ec8f1d5d5b76570270f3353667d793ef0c84c77c04b80cb12e54d2dd03b16f1f7ba2ab69124283a6694af36bfb14ef17e3dc81f76f87c4e9b8dca5435e85f96ebbea3f7bbc31b976f7f0591ce338916f0e710eb75cd5e32b75975c61820b5a21f36536b4104d90b7c20ee0052603f29251a94a52168edece9cf2db9e7367e4f6b5ad2faf1b1c84da6eaf41896cf2fbf0e82069fcabf9beeeccda3bc9c95036651d9c92d14ac3932c60e98ae9fdf94ed1a9cbf1b088f51ac05a49da9488721c3c1ab192e15729a2b95d2e449ab676b2c40582761711bf0903ff45b11cba719a0fba53178e3939d2f96ee7e84cc621636aaf59e477c9eca58eecd7074e07a964e6f064430e2a01b992d3d3d841168cff1e9650ba56fc21d9f649c3dc5a14ad2471732c14d899ab71d9c0332c303bb63592d762a0b77f7b29d61f01054728fc8da6ca549a705671ac85403b3c7cb6f6328e09ef9d0e40a6c9b1c55bf02aa7feaac4f7fb3e78503fb88f33a9241732fd6d739fe20a517adb23b5801b3f3fb0dfaf33662eda258e964e19431a1f7219e0b5fcdee874683379f15ba2e47fa39c03c0f09a5636f842d66fc361d6f6921430249f875d1308b46f127a47a6e33d97770ae761d9321b85143556cefd485bdfd90de37b971c7b968c0e920daafb77d54f7d1dd4f84d8b1bd0f3a35315f0d274f2494e73f45df7c6353d25060f48bb4f58508d71655362f69bb9277be13a42ec4c511d8f3e6a934a834a4c4b080e79e7ce6c402a292bccdef9a63e25da4aaed4b49a845d840df3182a82970e171f05b5e7e4536cfa234d501648277ff005b14ad3b4ea534881654e94a27ce5136d07c9f437eb1599be073849cda640d2b95ba0fef12bc82d31965ff42eb513fb2528df4fae9bc872bf0e12d9ea9f683b7441723486087e698ad54a6dae31f5c5017f09eeca6ec9842bc2ee3cd8ad45e2502be5557ac8e0e3731a30d4457e44708e5377f76baa36e3bea5041e8105df8e6b037b283edcf641de582f77b696f0194f5eeaae979ad657259fe38b82c44f3d4a16946a29ebbd2671ba7e07d1dbd3cd12accc23e10618afce27580caa5ab1a8e0837ee274b1670c4f415c357d62e36da1b338071cbb5769c2e30556cf650ddde955a39a77b96e7ec3d23381cdabb0abe15c6dddc899ca1e90c874a23a3cea25a5484f88e1434b4536f96ec380e7715477dfadf062a1b16a96891ea37b92e13821871973871bceeddac4943768640a1d3cce08d5606447ecf5cb31d1cdfef8403b50ef04d2860e793a3e894cb009906d82ad3e0feb406d18d9e156e6f2fe6d2231b8753c6cc45e66827c79a7fe9e09361cf81a902a62b41f6bd359e96379276887c140e57b0b8c3145397027c411210ebe1be32a6b94fbc0776cee7d80f9a11f9b693f90ab76834abf6909d4d735b8bee0d61a656ab441e41ec480eddb33b2ca5f26dcf0c378633ba872866a76f201a4d677fa89c9d69a9927c455919c4c502bc9719c35ea984273e5597f13f8dd0ff955cea510b84cb1bbf9dfb3373520c1a17e564eb72c3c8e180666fdb1d7404c22d0f4a0900662b89ea83d9527eafcd8bba7642bff0de1e02bfdd11c68efc69aefa2094575b3b144eabab9ce3a659e4e44cc0182a359cde855d00df5c468dc160745e148d3583f7021b68a44c1643009a62ecd70f2ea4e98ee7e1875f953e811da3a0bacbd27826e1c7dcac6375e3f70b281bdf71bbbe28fe5b5bbc7889e77744c915700ef71337e3b4f58136ab72c4c954030506932ea0e86a5b1da9caf76beb29ea5480a0f650abf1dada5d2821d2818eac62b952e4b97b50e4f98d65c1fb4311dc72e489afa5c21e0ac81176056706ca851a02966b02878e1473c1c289c65af8aa42023d0b0ef7803d8d501e8380a4a0ffa28cf0c6573336677e7850318edd44e3a8a3fbd34dc5c4f5e63a81c98e93cb65fd715517d7ef7e00473028ace6a8a7edf6b38ba655bb31f0337ebcdfd94844555a3bd2f223008ccfe4b8be6163a2f9129ef4b3d13dc891e54b02ff152f1bb5f857a3a16a384a72b154dd5b8e5947175ccbde394aba92f679cbbe18c35203351438f33c8e67038d101f22eab584cad708a83677ff3cf85b0e78d958796c7afad705bd3757facb869c894c3645799df328e304ba99ff2e867fc98cd9b1ca8f06b03d1b4de5ddb8d2b874594708b533501055645f7e26af3986828fc4f73884c026eac9944273ba15b50d4552881652e889b8c0bce6280afd5dfc4bd05c9abf108ca44cbaa640baee10dbdbc47a0e6eb102a5f83834e5981f7f755b2c8b5d33d0b2b3b4da8207084cec5c8ea9a1e4dcfb4b0e990ebec0696bc45960f4eeafa33fc0b1545d0fcd9411c9e2720b8dde6ea42ea766c09d0ee29e8802570aca7c7a885efd10b77cb3bd2e01c1697704d75d2aff025809ccf323ce4b04d28d291a13bd591cbbbc584d7a70083f5abb82724d24ca6b942f50dd12af2af4c67bce99d18af032ddd256859af93a6bbf6619dae0d90e643b412e5a15332be9a08f36dfdb89cb3711a8a327e70f0ddf5fcb5ace6d2fc17b109373c6a4957e1ce93d3e14dd4e30811122887c820bf6ff0c773b3c01993035e1ddcb2628b096ecb8b817526b56ee8f4bee5dcf92651a06c6433b47c3aa650d44430a513194c86e03fd96fb9d1b14bbf8ddf1af367c180cda1d27cf6f1042963d638045251315fdd39410a8ae62154da50511454f7ede851be9ba48a74d81c3ef606c064dd19e1901f58b317f6e47bb972c17d045491c00538898a7c15e3001f9e4054177b3153b42320597a2c22771586fe0bc7223157b2d7f74d1c100b40da76212137e6aa486fc3994cab6a27e063e8652516ae293e2b327de7192e329e4e6af0f1e1680453d6ad4953490d930b106a57a79ccc78809442ee87ef73855a9715c63361e60dbccf8231d5d048167b5b89ffa7754b5b5a0069fc208ece6f766f8115f81d79184cf5786e3b636d99fee6c39d796adc439e322fd31b4469339f249e4ee8b55122fa7e0780dca4e73e8815a2a20c323e90922b60cb2c94bad71781a7604a1e9bdffa8d1d255ac8f96fa0c2a7fd73a5ada205a505caa6390371ad60a8c2e1b43ac7a2a5578837a5933f1cd7d95a026f45eac7add7b04fae3811340f3cb12b0efc5bf782ddee6cc777311e5db7beb0d8e6410a4e4e316e292eed1c17f172f4a27367d75701b2e171081b2096ab62fa624484c16918918036fe549e5c6db9535eff2e4ebed7da358f9f1e0399b6362cd4d1841aeb46facf35f8fdc89bbd3999d4718cc5b966e48fc3c50541166caaadda726a035877a966a81ceedfbe4087d0d277ea97b1cd5389393dc19d5384e96f97b12fc43367060c48f443ddb309b94edcad9aed97359dd0d3e12cb4b9bed0bd59a63f18f723a467bfa10eff815cef0c458a205f35ff52090187c2e829ba3f286acdfbc0c200c0e5745c0cbdce9f6a5ffeaf1c6d81367ae15b97ec765c5675bc1815eb3416e91c04724bf41361188e6d1bbbdcdb0777476a115f83c0b1de57b492d08d29a9555ae56dcba0a4e495bc01021a361e338f58cc544a83b77c7915c7ec806bb985f2b63d6649244a169d6bd7d77c3614e0c1dbb9771b6a1e012deacda7e0cf33874862564b72af2da1da0a4d981635384e0ba074fb6860135f99b8f0bc15c93f9da0a3f0afdf05efb7379dd29484bad9d6f1c454d0c00d42b82375ae7efba615ca2fa46cb77bcc00084486dad79c04f6718cba4f09ec0f64481aa1460b453e2f3085cd8d44593bc3da7ff232936762fe9b38f984afd61c5a7981046457a0d430c9222fd0c7710e22793fa25ca1830ae139204c24430e5ae3716c08d53c424d5e9d6441bf5a9f3711049b3f2b1d3b10593b97c5c0fba0c409b60314b0abac4df84bc2a3dc24f86705781228664062cb1a36ceb013eecd7c635ce20951beb41feb23fe2591cfd5f7e4603f5ada02b43311111e2a5bd0a5660c23709fdb2db243d3fc910179e1985f694ab248e9ca03e8420165b529cd8c80fcd5609ae333d91073868f79c9a3d8748804c28e6b7423ed203140922508baff9c8b2a21f017195613f27871fb43255e59b07176c49d9d4a64eda465340bc58f65b63e615bac5bb6e04d6c4bf03807b4ab1181a475c7880ae79615158142599a5230752dccb50d6acb7644af91a19ea5daab0151d6dc424885fe1cbb591e890e51b7529f3a0dd1474e483f2c952896ec1ded3aaae572c72fe4843b3525908753e0dfe55888d14c54078cefff7561faa05556a50f6a4acc0b83f79ddba563e7d090cfb74a93343c238d1b07b4347feb7b4b02b741f800db21a1119eef8139bc4c444ae5eb62efede849fa2d22aca7c4b8c714a1ddbb870a9d4b5b33fb22d975590147a276ebba472d81a75c5b12f57e31758291719d0d69f743f2ef4bce14279fe0f12a9a7afbdfdd7312f78e086e2d051639f702097c4d2e36e5ce21f916ad336f879b3f2eb560c00710009000000000000001e193f4fbedd13758a81b0434da72609b90c798983a05c55058395189ce57b2416fe741bd3aa97061aed16dfe10afc0d2825802b5a28962c4ea8916963e3d76d602d7b8cb028e267127fb34289e80b62aa0e6507a41b8897edc4b3e50c217fbe0344aff408664af5b8e5519d65b09670b1f0cc4a6177ea316620a49c06203fc163f1d6cad573c0732cadefcb70b9c7e4a4e39bf15635000088020c000c007d007f00000000000000f80033000102b307ad1237008b75e85616450677039d071e18e679bf330411d552b4228710ba40c1c00205bf49d3f2ee0fe814d435eadd4393886c9c23fcbb0212ac7e748138166168e11c084f9229dbed2375289c83d37a7c881dab3bfe282551a7465b7751fdd302fc6b335f69478b108e92a6f1e704fe4c48bbbce6ecb9783d9ba3f35eca5c00881df74e54d6e2ce745b71ae6852844404f450789e9d28cf3151506f2c63e35d30cb5dd14484e35987c658fd30ad3192e7bb37e8edcf95b0fb143e028064e0159001b2831d5a943a50ae151708d2c24b3b1ac6fac01cd5d8d659bd9ec549e2ed8cc3751f11f356a22cdfa5a98f00000019d3637f2e2450207d3f3d1355018edd12513e993ad556368fa76e99474080bc14a887e033ce382027c6c049be0255bcce445a993f40b62ce76ba21a9bab7e04056e60bc778eb1bb3e9fb1356ab5dea6475593a590b7c6ec31a1188ea775e2088bc4f40501f663e92757f366ebd3a59f377b129e9d647f9b033dbacafbe314a513e31d661ebd3f06722dd4b85661ebb8db53aabf9de69a7dc284c99e92f802d1ea39aaa3eee9495a1db9d301b75901fc110fbcb6681ef02f64e5b6e493a07e7384dafd915de20b67b4523530c7ab83a0b30d03ce09cbcfbed5089b51f6f5720caf91457f1566aad6ac44577b53b59ffe9d68214a51a006d8c9963015ab8181bc02bca9d0fa2d407db1ca2a25f5e33e3268001585a688080de7e07b7801d40aebc52281f11e59cbae6025591ac8c6a297c00eebfd3980bdebaf45873ffd227de424521d3ea187bca2b85413fd0f7047ce4c23b5a9b09d23776e1c575874cfded3e3d32296b7ee3355203bb9ace39400ac4b1b46fcdbecc508"], 0x1340}], 0x2, &(0x7f00000005c0)=[@rights={0x28, 0x1, 0x1, [r1, r0, r3, r0, r0]}], 0x28, 0x48080}, 0x40000c4) r5 = getpid() process_vm_writev(r5, &(0x7f0000001e80)=[{&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000680)=""/15, 0xf}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/138, 0x8a}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000001c00)=""/237, 0xed}, {&(0x7f0000001d00)=""/161, 0xa1}, {&(0x7f0000001dc0)=""/177, 0xb1}], 0x8, &(0x7f0000001f80)=[{&(0x7f0000001f00)=""/124, 0x7c}], 0x1, 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20, 0x1ff, 0xffffffffffff69ad, 0xbe3, 0x100000000}) r7 = dup2(r6, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x400000, 0x0, 0x0) [ 1679.290023][ T26] audit: type=1804 audit(1555611549.963:4636): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2370/memory.events" dev="sda1" ino=17201 res=1 18:19:10 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100048, 0x500001c) 18:19:10 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x902) accept4$nfc_llcp(r1, &(0x7f0000000540), &(0x7f00000004c0)=0x60, 0x80000) 18:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000040)={0x0, 0x1, [0xf24, 0xfae, 0x3, 0xfff, 0x6, 0x9a, 0xffffffffffffff00, 0xfffffffffffffffb]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0x6, 0x70, "9768a99cffcaa0d83b08fc5e0e15d4875031c3e73073d3e6d228777c3e9497efca63f3bc059eb254816e95f2aea43409737a9130ff2eb41234e3408d176238cd72e1074599ef1a1be0c32be6a313f2bacf5bf4a1a2583c8281f95ea5c337984d9a28c210b3ee9375cc2a8616dd6f7da0"}) 18:19:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x0, 0x1}) 18:19:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x507100, 0x0, 0x0) 18:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000080)) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1679.868109][ T26] audit: type=1804 audit(1555611550.543:4637): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1951/memory.events" dev="sda1" ino=17313 res=1 18:19:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logdev=.Bfile0,\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x6434e9b2, 0xfffffffffffffe00}]}, 0xc, 0x1) sendfile(r0, r0, &(0x7f0000000240), 0x7fffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x800, 0x6, 0x0, 0x658}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0xa000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x7, 0xcba, 0x1, 0x80}, &(0x7f0000000140)=0x98) ioctl$RTC_WIE_ON(r2, 0x700f) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') syz_init_net_socket$ax25(0x3, 0x7, 0xd29157f963130700) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x7ff}, 0x8) 18:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000080)='\xe7yXN\x1e1\x00', 0x48000000007ffffe) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x34, 0x4, {"eaeedd8c65aeb58dc0a7434d7ea7e1af3b3ebd7daa2dc9d41e"}}, {0x0, "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"}}, &(0x7f0000000040)=""/18, 0x1036, 0x12, 0x1}, 0x20) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x1, 0x6, 0xfffffffffffffff9}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=r4, 0x4) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0xff, @mcast1, 0x8}}, 0x56f7, 0x4, 0x3, 0x7, 0x100000000}, &(0x7f0000000380)=0x98) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r5, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 1680.300552][ T26] audit: type=1804 audit(1555611550.973:4638): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2371/memory.events" dev="sda1" ino=17344 res=1 [ 1680.526141][ T26] audit: type=1804 audit(1555611551.193:4639): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1951/memory.events" dev="sda1" ino=17313 res=1 18:19:11 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010004c, 0x500001c) 18:19:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x141000, 0x112) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x8203, 0x9, 0x1e7a, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r3, 0x7fff, 0x7}, 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000180)={'gre0\x00', {0x2, 0x4e20, @rand_addr=0x6}}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x3) getsockname(r1, &(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000002c0)=0x80) sendmsg$xdp(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, 0x2, r5}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="98f464edc019f21b18352f5f36045b936d1918507f49925d9d9bb512197d623ebbcf9f77506d19bcc5ba751d7f7dad262f4dd9f36052a787997b4c735c545616c90b00c0074711288e289675888972490ec1ac02696db37935e1cbcb7999113b10a71ceeeb4555feb88b6351028d108960139e6f2f48e45a97a4272e07d1171ae824cbef", 0x84}, {&(0x7f0000000400)="13edc9cf36ad92290b4f0b8a6d94ad43d07029e4b6ff823c", 0x18}], 0x2, 0x0, 0x0, 0x1}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lseek(r1, 0x0, 0x1) 18:19:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50d000, 0x0, 0x0) 18:19:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x800) r3 = dup2(r2, r1) socket$tipc(0x1e, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:11 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x8000005, 0x800, 'queke0\x00', 0x80000000000}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}], 0x2, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}], 0x1}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x5}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x236, 0x0, 0x4, &(0x7f0000000d40)) 18:19:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1681.022476][ T26] audit: type=1804 audit(1555611551.693:4640): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2372/memory.events" dev="sda1" ino=17359 res=1 [ 1681.205508][ T26] audit: type=1804 audit(1555611551.803:4641): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1952/memory.events" dev="sda1" ino=17202 res=1 [ 1681.322947][T11720] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) 18:19:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x70c000, 0x0, 0x0) 18:19:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1681.908603][ T26] audit: type=1804 audit(1555611552.583:4642): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2372/memory.events" dev="sda1" ino=17359 res=1 18:19:13 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100068, 0x500001c) 18:19:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xff, &(0x7f0000000000)="1aeb87c84c46f071edc27b") ioctl(r0, 0x9, &(0x7f00000000c0)="cf85eea4a7250198504714b647e5af586ffb65b286aec82f4e9b0817aadbf746cc8c568e8ac9e635b4e5669a57503e5ebd3f0c782eb0499a6fae922db2369e2a1a817f42") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:13 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x715000, 0x0, 0x0) 18:19:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6f67ffffffff2e2f66696c65302c00"]) [ 1683.019978][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1683.019994][ T26] audit: type=1804 audit(1555611553.693:4647): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2373/memory.events" dev="sda1" ino=17376 res=1 [ 1683.153322][ T26] audit: type=1804 audit(1555611553.823:4648): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1953/memory.events" dev="sda1" ino=17409 res=1 18:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x20, 0x9, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="060006003f00550509000100000001045c554461ed3e95680a9a8ec8021d1e43f30e2b1198b0dc0a144292b48b7aa96b2d1c9c84c4bd417836dfbeb1060d7043b3e288dccedf971273d44e83433580e18b5c7412a412ea3f4d1317470ebc5eee2988447c284365d24aed0dc0ab2d6a699648b1436cc886a1241478bd987e455207a1716989bcc8519d95065a48610cb2dec9f176d4b76f4804bbfa58e28b1db192ea96429bd437345ccf7314e29df2f1a527736c3e9f3dea8e91e8f6245d2b6161b92e744aaeb2ac25294ec4a8bebf9e4412f0d8cf1d8ea8b845c73a8ab04c7d182d6b646a90e22f0876ee097bb5d8"], &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e20, @empty}}, [0x9, 0xf478, 0xa00000000000, 0x10000, 0x800, 0x101, 0x8e9, 0x20, 0x3, 0x5f0, 0x6, 0xba, 0x4, 0x92a, 0x78]}, &(0x7f0000000140)=0x100) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x740000, 0x0, 0x0) 18:19:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x3ffb, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000100)) 18:19:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:19 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010006c, 0x500001c) 18:19:19 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) r1 = geteuid() syz_mount_image$jfs(&(0x7f0000000100)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x80000001, 0x6, &(0x7f0000000400)=[{&(0x7f0000000180)="436ebb7f7ac66ea4eb324bb52c1ed731289163dfa8d1740a269acb4fefaa6413dddf11f6b075596ec8ffffa009b114b104c44b5e2e8a9798aef79920e3d13f6a02e0deb4992f0e7ea8cfb76ec7b769adf3cf887e3836bc9f8806592fe3b3b3", 0x5f, 0x7}, {&(0x7f0000000200)="1ab1ff517dddcd748213272c", 0xc, 0x3}, {&(0x7f0000000240)="e3a279d37dec694efb1da9d05810830e2a7447262e8194492f6bb6788c8116b2b943a625e83ffa5789e4e9640d896b12ab8218d1bddb84890aa540d20a7490177e7e2bcfd1de25dad0c5ac748e6d72576b2f7c95b85e", 0x56, 0x80}, {&(0x7f00000002c0)="81daf784fc0b6c61cda042626d9a163eeddfe8bccc29072304a6233d6de389cb51af9d7ea555545c8c7284ce897cb46e6a8e950cd60fb4fd75bd9defce291cd4efa6c45fb9762e7e19dd29b427bd87bbd096982deabc3cbc9ad2", 0x5a, 0x400}, {&(0x7f0000000340)="57100417c737b28c7aadc992af4389eedfec7028cef4cbc614687f96a9d6f80d152b07c4e2dba31823ede7c8e951bea5844a6433f6e8eaf832e28b965ee100e3df8465bb81a5103cbffdacf58d759cd4146795f933cdb521f064f8ea162f7d312469c2f9c2f431f319e9a6cb7aae35998eece41964ef923c786905d2ca42d38b0b558fe74fac087a1077ebd7f71ff2e2cdcf54c5429e5c7217ebdf83aec2d3a2966711efa0681cf06d28632f9392", 0xae, 0xfff}, {&(0x7f0000000540)="4f51699c2bea02aa1cd670a35eb71dc47d2b43e30132314847536cd3272eec55290c0430730eba73d1d5d6f690dfb1dfd641146d260f9db44c6bee5a669cd2af03258e468cad003b3e87fe4fd560a409a67123840028c9555adf7da4c50a81feef1c72c61d529009d7a98616d06c3db04b40dbd72381db21ae3a340238ec733f83c1f461f2ee841d0e952eae7811d5f9e0a8a73bf95f5de0a1ec909916bf46f06f6b499445a4850fbdb8e6a7fffb13ac69ba1f737792e5e6ebf9dbd370ed927daf2c4fa646538008647c41a056c2bec59a", 0xd1, 0xed6}], 0x0, &(0x7f00000006c0)={[{@noquota='noquota'}], [{@obj_type={'obj_type', 0x3d, '/dev/vcs\x00'}}, {@euid_lt={'euid<', r0}}, {@fowner_lt={'fowner<', r1}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x4) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c5b676465763d2e2f66696e659efcf3c804000097b6ed2ed1d98fc8b68736a6f65a4c084340c9"]) [ 1688.678931][ T26] audit: type=1804 audit(1555611559.343:4649): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1954/memory.events" dev="sda1" ino=17521 res=1 18:19:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000001c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530206d643573756d7d202f6465762f736e642f7365710020202f6465762fff13e990817e2c39f61a79bf215a631913c1e88914de28b02adb8f85d68ad8f3b7fae77253a3a37bf82ed2b15f470c493ea7b0143085c2b00cc05c30043fa0c4069cc57273f849caf74b00"/129], 0x81) r2 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x2000) r3 = dup2(r2, r1) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x6) [ 1688.752547][ T26] audit: type=1804 audit(1555611559.383:4650): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2374/memory.events" dev="sda1" ino=17537 res=1 18:19:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x80ffff, 0x0, 0x0) 18:19:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6f67e465763d2e2f66696c65302c00"]) 18:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000080)=0x7) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)='xfs\x00'}, 0x30) kcmp(r1, r2, 0x6, r0, r0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x40) 18:19:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fstatfs(r0, &(0x7f0000000040)=""/148) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) 18:19:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1689.438808][ T26] audit: type=1804 audit(1555611560.113:4651): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2374/memory.events" dev="sda1" ino=17537 res=1 [ 1689.632007][ T26] audit: type=1804 audit(1555611560.303:4652): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1954/memory.events" dev="sda1" ino=17521 res=1 [ 1689.657920][ T26] audit: type=1804 audit(1555611560.323:4653): pid=11833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2375/memory.events" dev="sda1" ino=17344 res=1 [ 1689.688415][ T26] audit: type=1804 audit(1555611560.353:4654): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1954/memory.events" dev="sda1" ino=17521 res=1 18:19:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x940000, 0x0, 0x0) 18:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:20 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x5, 0x5, 0x1d, 0x20, 0x0, 0x1, 0x12000, 0x4, 0x81, 0x0, 0x7, 0x80, 0x0, 0x4709, 0x4, 0x7, 0x7, 0x7fc2, 0x9, 0xfffffffffffffff8, 0x9, 0xfffffffffffffff9, 0x5, 0x5, 0xffffffff, 0xffffffff7fffffff, 0x2, 0x3ff, 0xfffffffffffffffd, 0xb3d2f11, 0xffffffffffff712b, 0x40, 0xfffffffffffffffe, 0x9, 0x200, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x164b0, 0x1, 0x7fff, 0x1, 0x1, 0x7fffffff, 0x10000}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x3) write$binfmt_elf32(r0, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x3f, 0x3, 0x10001, 0x1b43, 0x2, 0x6, 0xa32, 0x37b, 0x38, 0x311, 0x2, 0x60, 0x20, 0x2, 0x6a, 0x7, 0x401}, [{0x1, 0x10000, 0x1, 0x2, 0x2, 0x1, 0x8, 0x4}], "f8b4e8a8ea28da1f30883213a8acf4f0d8c141c66f142a260ce79753b4d5f77e52a3d42a446b6e90310e36de89cd5dff9faa43ae434cd8afd9eb198a21610da9043c4ce5f24f39f1de01bf84cb7e4b3d69133d81277685b506f5ce564fbb00d1d7639eab8cbb3296fb33671f8758082fe719da890418da0ffba8b4d5b0d33ea58c442e859456716098f1a1dd939b8b56c580bfeb101cc78c3101190d25c86c6a50f2743f3585", [[], [], [], [], [], [], [], [], [], []]}, 0xafe) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000000c0)=0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000007, &(0x7f0000000080)="0adc1f122f123f31192734") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6f6a6a120900000000000000000076"]) 18:19:20 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100074, 0x500001c) 18:19:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x0f', 0x2da8020000100000, 0x500001c) 18:19:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0ad70cdc1f123c123f319bb60354f2ed2bcbbb2a451b6730bc325c934e198b08d7d9a9f9384d4a69aad155c65fc684d9063c2d48930cedb6c829fed0ef93fd73bf03f73d6f03ebb6206ae470f76d0e50f10695b9ce61654b713c50e5faf82e5e3c489eff15ce50a9e8ba26201038f4ff7823ae51a2c91565bb706798c0cc63b176cb5943") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x7f', 0x2da8020000100000, 0x500001c) 18:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000340)={0x1, 0x0, {0x7fff, 0x10001, 0xffff, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0xa0fe, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="30e203768f6d44d8b1d8d2f8117d2572ee1e15cf399122cea67f3e03f926b02268cd75643a160679772e3759c156427717ca319f9556f6d1691e3ece75cc674693e529139e8df511faeef59e643c53570243144414d386f3a9d4ccb0b54a7ff285f73cefb545ae344950a8fa4fc628620abe8843a3dc0fd0d50a8800d908d7d5d603ab6f5a6196d676a6ffafbab3", 0x8e}, {&(0x7f0000000080)="42e913ca057f5616dd36674c257898b63a38e4a6b3b9a37135dffee2808a9ea724647f", 0x23}], 0x2, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x4, 0x4) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x2, 0x0, @time={0x0, 0x1c9c380}, {}, {}, @control={0x0, 0x8, 0xb0}}], 0x30) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x400240, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x4, 0x4, 0x1000, 0x200, 0x80, 0x42a, 0xebe, 0x10001, 0x2ed, 0x8, 0x8, 0x8, 0x8}, {0x3, 0x826d, 0x1, 0x4, 0xf1, 0x9, 0x4, 0x2, 0x7f, 0x9, 0x8, 0x81, 0xdd8}, {0x3f, 0x2, 0x3, 0x100000000, 0x131d, 0xffffffffffffff95, 0x2, 0x7, 0x4, 0xfffffffffffffa84, 0x2000000000000, 0x80, 0x8846}], 0x1}) exit_group(0xf8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffffffffffffff9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200480c5) fcntl$setown(r2, 0x8, r6) socket$inet(0x2, 0x6, 0x3) [ 1690.209975][ T26] audit: type=1804 audit(1555611560.883:4655): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1955/memory.events" dev="sda1" ino=17569 res=1 18:19:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) socketpair(0x5, 0x2, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x3}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @rand_addr=0x3ff}}}, 0x84) 18:19:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x7ff}}, 0xc06, 0x5}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x7ff000}, 0x8) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfe26, 0x200) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r4, 0x8, 0x0, 0x0, 0x0, 0x6e}, &(0x7f0000000140)=0x14) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) write$FUSE_STATFS(r3, &(0x7f0000000300)={0x60, 0xf764afc2713b2204, 0x2, {{0x1, 0x9, 0x1, 0x6, 0x6, 0x9, 0x9, 0x7}}}, 0x60) 18:19:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc07000, 0x0, 0x0) 18:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000100)={{0x3, 0xfa99}, {0xfffffffffffffff8, 0xfffffffffffffffd}, 0xffffffff, 0x0, 0x800}) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) seccomp(0x1, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1fd, 0x6, 0x7fff, 0x9c}, {0x10001, 0x10000, 0x0, 0x6}, {0xba, 0x6, 0x6, 0xfffffffffffffffc}, {0x100, 0x5, 0x3, 0x40}]}) 18:19:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1690.614654][ T26] audit: type=1804 audit(1555611561.283:4656): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2378/memory.events" dev="sda1" ino=17374 res=1 [ 1691.035570][ T26] audit: type=1804 audit(1555611561.703:4657): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1955/memory.events" dev="sda1" ino=17569 res=1 18:19:21 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da802000010007a, 0x500001c) 18:19:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logd./file0,\x00']) r1 = dup(r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000002c0)={0x2a, "a1b4ea1283f15d75c63bb17f3b97af56f2f12d120c1b92661a73d4e212fafafd3b9f0339358c913f5e387abd8337ff823d839008b7f1143480143c61466e20a26f64e007631307c87575a9e970c16e3361b4f4d97ef8078f2ebdd325a88f0be861fc4645c4623b2f2701e9211c2b8f5d136f95f74df2d9759281e5b53a056c8a"}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = getuid() r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="8a9e422bf6320170fd6edaed93fd09d986e55a18a82ecf6ee9e0c2db81b6bb2a749d9ff28eea05508e7f3b94292ce23fd0599f61082a267cee41ba1f2d9a1d35c1afeb93535d9c528a15de5657edd89bbaf788a8eb86a9868593f000b5", 0x5d, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r3) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/65) 18:19:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2, 0x7}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x1000}}, 0x8001, 0x7f, 0x30c0, 0x10001, 0x10}, &(0x7f00000001c0)=0x98) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RSTATFS(r1, &(0x7f0000000340)={0x43, 0x9, 0x2, {0x800, 0x6, 0x9, 0x400, 0x8, 0x3, 0x3, 0x7, 0xe6}}, 0x43) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x0, 0x2, 0xff, 0x0, 0x8, 0x8}, &(0x7f0000000300)=0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r6, 0xffffffffffffff01, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x800}}}, 0x118) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd05000, 0x0, 0x0) [ 1691.109318][ T26] audit: type=1800 audit(1555611561.773:4658): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=17569 res=0 18:19:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$bt_hidp(0x1f, 0x3, 0x6) 18:19:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:22 executing program 2: timer_create(0x7, &(0x7f00000001c0)={0x0, 0x5, 0x2, @thr={&(0x7f0000000040)="1e4b8ff2732c81c0b05c488a8559d27a5c2b93d71ffe91c7a75df031c4b9eacab555de8158bf38950c953810efc8c98a289201cc2d9ef125eb840a4e99f4343d079d85c0c677fa7d9f897276f8b0c1fd52ff6dc27fb14a069b17adf905f7496bd6893b68cea766d1cddefd06b1204df7c65a76a408", &(0x7f00000000c0)="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"}}, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000240)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd05803ebb634763b38fa15fe29974870") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x7fffffff, 0xd865, 0x200}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x1f}, &(0x7f0000000140)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logde,\x00'/16]) 18:19:22 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100100, 0x500001c) 18:19:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1000000, 0x0, 0x0) 18:19:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup(r2) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000100)=0x400) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80100, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0xd90b, 0x81, 0x4, 'q\xff\xffue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf8\xff\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00 \x00', 0x94}) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x222000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000080)={0xc0000000000000, 0x6, 0x1000, 0x1}) r5 = dup2(r2, r1) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f670600000000ff03006c65302c0023ceb572f989cf7bfb9a0a43eb70314fe59cae4f5ec8e0e3d7454f088aea3775cb342baee76224bdd5620b41f251998110337ed660cb248f96ea56168c49e875d2b9b4b2516327d614cad4bb353925ebff6409dad15567f3d02f4ed4645158bd74541361f1cbb4f378fc"]) 18:19:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x04', 0x2da8020000100000, 0x500001c) 18:19:23 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0xcc, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23}}, [0x6, 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x5, 0x1, 0xec, 0x9, 0x3ff, 0x9, 0xffffffff, 0x1f, 0x4387ae0f, 0x401]}, &(0x7f0000000740)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000780)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x6, 0xfffffffffffffff8, 0x6, 0x3a, 0x7ff}, &(0x7f0000000840)=0x98) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xc02, 0x0) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x0, 0x2003) sendto$inet6(r4, &(0x7f0000000380)="d1c17008e572a5239c7b87cd9263ca6e5bcdedb401a29f8aa561a25064f96bda77209909607883d4adbe23b9094b9a71ea990fdc72e2c8d57dda8260de2640e6fc8a17ae40a9c8b38799a96d5bd9210d967fb43ae7ed5f241772d2fb448a63dc19558efc542fac4e421f299ac6ba4b5498ce4fa4619e89e99602ca1b17583a90c0c5f78cc94f6cccde6c8b62ddf0dfaf2e8ac8c86be5c53e1ba755f0fae6ced6737434", 0xa3, 0x800, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @remote, 0x8}, 0x1c) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) read(r3, &(0x7f0000000440)=""/53, 0x35) lsetxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x2) r6 = dup2(r5, r3) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7, 0x9c, 0x200, 0x7, 0x0, 0x6, 0xbc1, {0x0, @in6={{0xa, 0x4e23, 0xfffffffffffffff8, @remote, 0x400000000000000}}, 0x6, 0x0, 0x0, 0x64, 0x100000000}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x1f}, 0x7}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) connect$vsock_dgram(r6, &(0x7f0000000580)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) dup2(r0, r0) 18:19:23 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\f', 0x2da8020000100000, 0x500001c) 18:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x1c', 0x2da8020000100000, 0x500001c) 18:19:24 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100300, 0x500001c) 18:19:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x6, 0x7fff}, 'port1\x00', 0x40, 0x0, 0x7, 0xffff, 0x2, 0x4, 0xffff, 0x0, 0x7, 0x3f}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f00000002c0)={0x7, 0x70, 0x643, 0x9, 0xcab0, 0x2, 0x0, 0x8, 0x8, 0xd, 0x9, 0x5, 0x8, 0x6, 0x4, 0x2, 0x14, 0x1, 0x9, 0x3, 0x5, 0x10000, 0x401, 0x7ff, 0x9, 0x0, 0x9, 0x4, 0x8, 0x5, 0x6, 0x2, 0x68, 0x5e1, 0xfffffffffffffff9, 0x1ff, 0x8, 0x8eb0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff48e, 0xfff}, 0x0, 0x4, 0xf69, 0xb, 0xffffffffffff0000, 0xfffffffffffffffa, 0xff}, 0xffffffffffffffff, 0x3, r0, 0x2) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1000040, 0x0, 0x0) 18:19:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x721082) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x304, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000080)=0x96f) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events<', 0x2da8020000100000, 0x500001c) 18:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x200080) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x6, 0x0, 0x400000080000000, 'queue1\x00', 0x1}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xa00, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000080)) prctl$PR_GET_SECCOMP(0x15) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f120802090008d1704b3f8bec73b19150404f5fddf9e4c4063bae288454f50b223890157590e1c16055eba8c366e739135a5a1f2a038f24f8f0c12f8b3a571eb862fc6ec93ce1fc10ca8104bd51b8b1c8856595b32f5803a3825d44dcb9f09744d41d4954fc116324706a99d76e0daa1125e080f24a594cd6bff8b2f09abbf87daa63296943ede40c7d2044f986f69df50cee603fa576d10e4da8c2bfae2c5d8482f261493042a8fdef307c6eb538ca4286041808c64b1f9b65a8a5af024185df9423f0c2f0e72d082c53093c665072a2639bc2ccb094d1a82359b8") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='lQ']) 18:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000540)="0adc002000000000010070bf7d1b9868d918f5e30e31b8414c6122dab9d193bf48f9edbaf22cd23021ba550abccc8bc82503ec895d5c920b38a37135ffafbe0e48ee737369de6438bc0c35c461db0200f475ea8b50dbcf3ac74631a4ce394660dd9cd56aa9cf49b48d505cde3fef49123a28c32214518cf33021f4477c4e2a99609f7fe39731734e24b940090807000000000062f8d0e100000000000000000000000000000000000000686c84c6d475d1c198cfe4028901a3a54699ba1c7b008f8a5b00"/206) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x600) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000002c0)={r3}) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r6 = dup2(r5, r4) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') accept$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000b80)={@initdev, 0x0}, &(0x7f0000000bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002100)={'bridge_slave_0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002180)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000021c0)={@initdev, 0x0}, &(0x7f0000002200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000022c0)={'irlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002300)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002380)=0x14) accept$packet(r6, &(0x7f0000002480)={0x11, 0x0, 0x0}, &(0x7f00000024c0)=0x14) getsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000002500)={@empty, @local, 0x0}, &(0x7f0000002540)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003000)={'\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003100)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000003200)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003240)={'rose0\x00', 0x0}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000003280)={0x0, @empty, @dev}, &(0x7f00000032c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003300)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f0000003400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003440)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003480)={'syz_tun\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000003b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003b00)={&(0x7f00000034c0)={0x638, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x128, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3c}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xaa4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1b8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x45}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r18}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7, 0x2, 0x3, 0x100000001}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r20}, {0x1bc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r26}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x1000, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13_\xb9\x95\x00'}) sendmsg$nl_crypto(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x400, 0x70bd25, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) write$sndseq(r5, &(0x7f0000000000), 0x0) [ 1693.740960][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1693.740977][ T26] audit: type=1804 audit(1555611564.413:4663): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2384/memory.events" dev="sda1" ino=17418 res=1 [ 1694.198097][ T26] audit: type=1804 audit(1555611564.873:4664): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2384/memory.events" dev="sda1" ino=17418 res=1 [ 1694.316256][ T26] audit: type=1804 audit(1555611564.983:4665): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1958/memory.events" dev="sda1" ino=17362 res=1 18:19:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1000080, 0x0, 0x0) 18:19:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 18:19:25 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x309000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x3, 0x6, 0x7ff, 0x6}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={r1, 0x0, 0x30}, &(0x7f0000000480)=0xc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000004c0)={0x5, 0x32314142, 0x3ff, 0x81, 0x0, @discrete={0x229, 0x8}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x404803, 0x0) ioctl$TIOCCONS(r2, 0x541d) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a000000000000003fd070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f676465763d2e2f66696c65302c6700006f74612c61747490322c00"]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xd8, 0x4, "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", 0x55, 0x1000, 0x40, 0x800, 0x4, 0x5, 0x4}, r3}}, 0x120) 18:19:25 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x200) close(r0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000002c0)='queue0\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="8846131912a1a99904be343786503c89750160b617b1", 0x16, r2) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000300)=""/95) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000380)={0x1aa9, 0x9, [0x8, 0x4, 0x0, 0x6, 0x400], 0x2}) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$inet_udplite(0x2, 0x2, 0x88) 18:19:25 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100500, 0x500001c) 18:19:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@empty, @initdev}, &(0x7f0000000080)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x80, 0x3, 0x0, @tick, {0x0, 0x10}, {0x0, 0x1}, @connect}], 0x30) 18:19:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800, &(0x7f0000000040)="0adc1f023c123f319bd070") fremovexattr(r0, &(0x7f0000000380)=@known='system.posix_acl_default\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r2, 0x608, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xc}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x43}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) [ 1694.774688][ T26] audit: type=1804 audit(1555611565.443:4666): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2385/memory.events" dev="sda1" ino=17644 res=1 [ 1694.851473][ T26] audit: type=1804 audit(1555611565.503:4667): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1959/memory.events" dev="sda1" ino=17635 res=1 18:19:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 18:19:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) ioctl(r0, 0x1, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000000180)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3;\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcaC\xe1\xfc7\xab\xf3p\xbfT\xc9\x1a\xe4!\xe2 \xd1>T\xc6(1U[\xad\x15u~\xb2G\\\xb1\xc1\x13\x1d%\xaf\xb5\xb8F\xa5\x11M', 0x3) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r5}}, 0xc) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10000c0, 0x0, 0x0) 18:19:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0x2, 0x6, 0x9, 0x30b, 'syz0\x00', 0x100}, 0x1, 0x408, 0x8, r3, 0x4, 0x0, 'syz0\x00', &(0x7f0000000100)=['queue0\x00', '\x00', '/dev/snd/seq\x00', '%*\x00'], 0x18, [], [0x1000, 0x4, 0xce, 0x7ff]}) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) 18:19:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 18:19:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x30000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/247) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="113dceebba686828e9c14c81f9b35c2a9a6bc179df341994c65d6c6f677c55a3e153be533bd43e30ac544e95b619ac6ecdea9960f504e7c294bcd1c5d23be3f89acb94984655cc6d62d5a8523aba1f037af5db399dcda944361c8621e777c93a2a0e3daef2b693d43bde6c055a"]) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000180)=0x2, 0x2) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x1f38, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="7ce829c652505fd75a2347cde66483e632b01905e8e1ac11961ef635b2e3de367406965a931623de7b92153d2e85856c1006dc7b87f0407aaf81bb0333db4a9156f7b7c6efe8a48d807e291295b8308b9d9b7df03addbcb9619eb7a4fb8da8e2877a662796a7f16af4879783183525fd4f49c8afd21f2e06e1a8cbddd0eaf09c1bbd0a0db4118dc5f97971196e170861bc511265349323ab9e107bb055a24d050bf6fbf85739", 0xa6}], 0x0, &(0x7f0000000540)={[{@nolargeio='nolargeio'}, {@ikeep='ikeep'}], [{@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r2}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x11}}, {@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#p\x00'}}]}) 18:19:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x60) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x2, @empty}}, 0x1e) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x2, @tick, {}, {}, @connect}], 0x30) [ 1695.585911][ T26] audit: type=1804 audit(1555611566.253:4668): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2385/memory.events" dev="sda1" ino=17644 res=1 [ 1695.707062][ T26] audit: type=1804 audit(1555611566.333:4669): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1959/memory.events" dev="sda1" ino=17635 res=1 [ 1695.765078][ T26] audit: type=1804 audit(1555611566.363:4670): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1959/memory.events" dev="sda1" ino=17635 res=1 18:19:26 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100600, 0x500001c) 18:19:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1010000, 0x0, 0x0) 18:19:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x1000, 0xd13, 0x0, 'queue0\x00', 0xfffffffffffffff8}) socket$nl_generic(0x10, 0x3, 0x10) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") [ 1696.216817][ T26] audit: type=1804 audit(1555611566.883:4671): pid=12095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2386/memory.events" dev="sda1" ino=17633 res=1 18:19:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) [ 1696.318898][ T26] audit: type=1804 audit(1555611566.943:4672): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1960/memory.events" dev="sda1" ino=17640 res=1 18:19:27 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) r0 = geteuid() syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="030ce817dc6220f04f10034d238a56b0f90c51ad81fba18491db0aed69955b1ee0405b0f650bede6d690034adc3c6b86780f5bc0fad9d8de38c6627a6886851e27aedc178462087598a0abeb734478671641f868fb3297630a5e5505a2c0285f424a5eb5366e736b59d0bc92f137146aed94689aef6b1acb31a38368", 0x7c, 0x3}, {&(0x7f0000000180)="08648a6269769c6e881dc473ddbcc6865d8812a96817cca49071e57115eaeaa827450b36c0280361d2cb69b07ccd2f4290249166dc5748a662b5bd65ee2039d541fc9e11abe1ae4ac82489f5805323fc4f13773656223a9bfe52ac9a09c3737bdc5320bf3746812d3fd08f3c0324706ee006643fd9b58f88c647d1d588d01b48a5f14decec4851ba2878ab2905d252", 0x8f, 0x9}], 0x2000040, &(0x7f0000000280)={[{@nodiscard='nodiscard'}, {@lazytime='lazytime'}, {@norecovery='norecovery'}], [{@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@euid_lt={'euid<', r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'xfs\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f676465763d2e25cf242061302c00d5ae330eeaa3b12599b57696652dc675"]) 18:19:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2000000, 0x0, 0x0) 18:19:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='loVdev=./.ile0,\x00']) 18:19:28 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100700, 0x500001c) 18:19:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000440)={0x9, 0xe6e}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000480)=""/4096) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="8593413a0d423af8385ba0f62ffa3153d46b24050c36f999db0b0f4f0d5a31d76ff9756f6d41cf62b206a7b335fa1dc385217dd2eb3a80b8de898055f559248988f65922120b60b3f42c30d13a54d7de2fae62a61318836f86b8e5b0bc3ff3d8bd004f55d5fcd60be2b67ff2640887d11bc3a9b49c8e092f72766453f29525d1666ad679429d911a592a5652facc68c8fc2c7da952656606ac55f8da52b1a0a6dee4bbe02e4314fa9c2c98e532c188cf37a5350ad1aebaf0e6129051e54367910aac6928ba16224ffb36841d28e83978ed982ba94899", 0xd6}, {&(0x7f0000000140)="3db291d59308c83b5661564b7f52c30a25d4c8d18607b4b3e7a748a664f47cb24ca8a622690b2ea8fc242b22100d6854514a2bc06308819de70da9c1926062a7157224583870caf37f56974a849e10dad3740b81a4be3c35c4fe182f96a111ac11bbde22a866769342b46e09ffa46e4d", 0x70}, {&(0x7f00000001c0)="c00f25562c0c5f9fcf636233d98434945b9cbd4e7b9e37806a87f640350c156ec265a80ba56190c13b4611c0f68bdec5fd9ac9b0d47c96741d4c0bd65fb50689e558717d1a0dcd8c36a88bb2542f6b52f10b78497646f4a23248e5ba29a8a40c528808c2e179e20d8dc84cd76d1709eb", 0x70}, {&(0x7f0000000240)="ce5065e5069a0db2de6155f296b6241c1c209373b1fa8f9ef26b44dc766a15d482c9a8c0a354729f6ac1352eb6627b900e36eadf77e06f6d4b4d05b4e42b06073753598b8f8d1992bad9dcd07e5f7eb5c95f5c473ceec4ff7a1313c6100f7be7f9508240bdc42bf6b5fd5c88e53dd164c3dd26407f391481723622a9588da47d9cf615d507eecb0992aaee2738037ac05f50e22759f5f8459af97d2caf9a09e6aaea6e476ce10a5b9b8e797a648f8df092ba9fa443b66420d14c455b23c9f43c17051ad0fe020aa9c4c79e3e13c01b5d4fd2524f81af9e05e960df0afce309e2fa73732fe098965b80df8401a6a7c9eaa7f8d8ec08bab6b7", 0xf8}, {&(0x7f0000000340)="59614b4561c5c231cfb70963d42e8d", 0xf}], 0x5, 0x0) 18:19:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3000000, 0x0, 0x0) 18:19:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:28 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="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"/285) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x647, 0x400) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x800) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) 18:19:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x400, 0x1000, 0x101, 0x2, 0x0, 0x4, 0x400, 0xa, 0x4, 0x4, 0x0, 0x93, 0x4, 0x2d76, 0x3f, 0xbc, 0xff, 0xdef1, 0x9, 0x7fffffff, 0x100000000, 0x9, 0x0, 0xc19, 0x7, 0x8000, 0x100000001, 0x0, 0xfffffffffffffffa, 0xff, 0x20, 0x4, 0x401, 0x7fff, 0x8bc, 0x1ff, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x4, 0x0, 0x4, 0x9, 0x7, 0x811c, 0x9}, r3, 0x4, r4, 0x2) r5 = dup2(r2, r1) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000003c0)={'caif0\x00', 0x40000, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x80000001, 0x6, 0x1ff, 0x0, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000340)={r6, 0x1, 0x10001, 0x4}, &(0x7f0000000380)=0x10) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x11000, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4000000, 0x0, 0x0) 18:19:29 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100900, 0x500001c) 18:19:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x6, 0x2) sendmmsg$alg(r1, &(0x7f0000006540)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="5881540c522f844fcb0c08600f06d213ff43faca340414185d43651865452f58578fb0f7ed78887e1cc6f451062653f20afe1b24caba6cb20707bc3e9890286e37cea07b9cda5c4f8d3e9d590f905584435dda3ffe28881488e1ba1c5317a3e8845bee75a1f464c562096fc404e9d5ff58d608ccd72181d1f1d89e8226a4c28ffe6af0266bcec000e3d9dee33153e97a7f91f1037f3f8d0d9b04cdcabd7d521f80fbf6c65a9d216650d90954d08afab75efb6cd626914cef1680e6ccac890f2eec", 0xc1}, {&(0x7f0000000540)="2198aed0f3c857d808c5a4b1fc0e697d74adb354b868fa9cdb05d3b5dc33f6f86a5f39e7dba401c3350b52906f0349c6ab1d4e19de8145242788b00b20cb9e36c744fcbb80db7c85e1d3b8e0b651c6ef06d05c33ead5f2b34a7d4d3ff50a9e9559ad7e79a7ea33f7d204e9730fbbaf824432d4ab4711030b5621f752f515a8dfeb69f8807222650c10eadfaa1ed6d48adb7be55832972197cd83c0351c", 0x9d}, {&(0x7f0000000600)="1e83292ebb52cb61152c04aba33a135ae8b14ec611a76a358735b88c09bcab375ac42beec47f9bb11520be4424a3a7157b3177a52cc0cf626a295f9fc80b3bea2041d6634f6ee19e7904cf66283c73428613ada2ce52fc7947c2", 0x5a}, {&(0x7f0000000680)="5364754e0c7d3394ca5626a935ed6c6c339f786a8bc56492bad9184ed149a5040d22642e0bdea34d015dd02e56315c0c39cc5eec1a4d975f223fa1dd7488de8ffbdbd45eb608c9f873da76a8c6e72c7803135a1419d9465d8f84e6e156e1024bbab260db4a794a468d6076464296563e3776", 0x72}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf8, 0x117, 0x2, 0xe2, "3bd83a632faa270583b173cf4276e75a54f7e79932feb46ee5593c98b4569d96ab382c72e327ba5fcbb0653bf7309ea096bf7817a4ed5f339b8671216a31a745855c3a543100d3702f6a8c06f8705bda28c38b24e075f1c67633f681be34423d8ef612c41e43f0d78105e4ca19dff2c0ada2fda34a3a12a8565f45098b35b61ced53c117b21536ead910ab3e1700621cc1aedf7a1f3c96cfdd6e0b334d7ccb6bc4ecd65d5a0a462a8ca93e719e0a6b374bc837f511a2a4bb1979a71bcc1a4e8176b25703ff27fb0d819d7169760f2bd82be7dafbd10266aaa51e4ade4086ffb8f4d3"}, @iv={0xb8, 0x117, 0x2, 0xa1, "35f2c3eacd0eb5688cab8508dd10b437270d8f9e31b240293b7c19f873893430e100804227f6176a77235b73abdb8329dac7761e6132b8f36afe986674c386cff942b12a6535b91e962a56776289f361e9f71693b58558ee41aeecdf8bc917adfe9bddac4371a5183d3691b89417ead67533a71c767b90124f91532c1dd93304ccdee946e9565b8dce1f22e8accce74ef9bfd530b39c0562e662b2f5ca7cb6fd69"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x1e0, 0x4040880}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d80)="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", 0x1000}], 0x1, 0x0, 0x0, 0x51}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="f74fde85bc21f55c9a91313e3df40a94f171980e9466d3c42ab7bbc1256c9c9184a17865fcc4982fea07df152e29fd06673006b35346fc0c2aabf54d62bddf2521771efbf77cad15ae78eb895180753a5baf83b0fe972e28c63b65724fa66fe48f6a183a2815b9407432d49cc50089f5aeaac48fb3915a1d4e232c5626b080faa87255b7a89bf90b2591aaf9bebe5e893585a5b714ff12ab3b0fb0776b03ab2644f99bf603d4b905b2ec7a507054bc55361fa86b639f9d4cb6557d4671914892", 0xc0}, {&(0x7f0000000a00)="4684a8822cd5951391f32c9362f1f261cf363873432777d38b221c6fdce390067c659f5f721c11d00089ea78ed533638", 0x30}, {&(0x7f0000000a40)="af789f57a4d5082033dac0d9d744a290041c31e963edda2a835971977d28eaac6e0f059e94ed8b82d72372c5ac2175908e7726ff4db74788b35763ffd237c3a6755d68868e649d2283b201f2aa8441a76eff332ffc851761fbe0a89dae0103a0cbaa057bc00977c5f60f29dc3fe84c7597dd569b46e716a23ce83195aeac2a1a85cec368c242a6416f6fdf51cd25b55234532ef5671b17dc7d15d346986f", 0x9e}, {&(0x7f0000000b00)="31df9c7cd31f707c4b367f712d63335996879306c307a72a9dbc1c5cbac4951a58500de7a57aea3fb3c7bc3df6ce5fbad7e2b3851b", 0x35}, {&(0x7f0000000b40)="141e9e6009833ca860ca12db7905238b25c8eeb02b92b0dbb09ecbfc613a77802ad3f2a0bc09ddc86a31a636db46d15810416b50071a33fb177ae3eede0bc7a3cf223e8dfb421a5576bbb0b730f7f25b278aa4677139853886c1a9b8802b62fc76ae1b9c3353f9f328b87f54a87cf7af3b7b388a41e72f7ad8f7ac7ee6d886c11aaa7643d43c2ab64412f7f7f8079c22f32f87236a23f8fd653b37bafdfe8159e881c2ebd44f1f3ac194115d6c53b234c18aaafbab70c34a70d5", 0xba}, {&(0x7f0000001d80)="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", 0x1000}], 0x6, &(0x7f0000002d80)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018, 0x4004040}, {0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003dc0)="e2c3c18ddbae30d0d8bec31ea264fc7e5655bb1f5d68ee9329102c9951ee0dbfe230906c3c6f87af11512d9a157383da76b4fadc40ee347b71c037db02107d528b9f3e03a8d4cb29570ef0c640eea96ab28c263613ceea8ab9daa3ed2fb74417c0d3ee33764ecaaab4b7e2f2bb7a92437748f735464bdb0383ce4dd71f9077be851e13a392a874e080e2f8c4ebf0fc3b390b943ecc3159ac2201358b1697f87444a7b77ca492f68d7d39bbe12b8250a018a65fa3fdf9029b74846e85ced1b0fd69980d6f7b1a7dd63d921526b4a91f788220d03c4ac9ba9fd1ffbcf3c605a4eb11dc2c", 0xe3}, {&(0x7f0000000c80)="4d4344b376bf62a4ceaae5f6c733e12a2abae573ada58e54cd0278969be91923d40dbdd559431771a8c0f0f5edfdddd93de3aecbc6feae00905a8ff95bc88c7050b534b1e193ee53fdf2ec5686cac1800024", 0x52}, {&(0x7f0000003ec0)="0973605d9eb36e3e84f5cc8869cc958777ea8816bef980a4ca9b3a91fcce3e5ca0a37a4d5d971c7efb08ff178b4f6ca128a00a4677eed12adf856155e74a18d206b49bf776871e380c4ae621ddb820ef9c155346a1c1f71718791981e2014cf429d4fb57d0507be3efd6c4ba1cbb4f08b1e5b3464f95e3ef", 0x78}, {&(0x7f0000000d00)="abb1bf2b50c98424af0cfb79b03b3f917665a8b0edb5fd031309d538b55568310069793f2cda70fdf942ef67e79db5d52e003602a214e60b37bd015a6e4f", 0x3e}, {&(0x7f0000003f40)="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", 0x1000}, {&(0x7f0000004f40)="ad13e58cc70a18a8070a63a6becc955bb29df96a58fe6f03", 0x18}, {&(0x7f0000004f80)="81eea03ac4acbf7df1351683e168b06a2f9c80797d8b238e9bbd995251aa28a9a7d933bc7978b6f13d72a2e61955da0c0700e00be35f8837cba8929b457607c2f0a473cb4c7492d95c2a9b96f5b494d6976f2fe7d05e76d331c5949172e190012a3a6a854508987d2baa8ef843108017cd430c24b63613fabcf318b1c91985a76e9400ec7490b1351bbf00ee11b68b0d5a66756f7aa6bbc9bfce441640056b86df5d8abb598274fa981767f468eb276c96", 0xb1}, {&(0x7f0000005040)="f02535f2326b6e3b56635ae7fc66d85d3342cd7c3e248540d4e23a5a5138fb5f10abb0aa463c2b3e8c6b68332a49002723fa67b29357a03d3adb1c34", 0x3c}], 0x8, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000005100)="b7f5bc830d0f8088de", 0x9}, {&(0x7f0000005140)="308edaf4f34f5fc00a568591c83641f3a6c3a05610c767db8aa5eb295df98835e5c55c32c9344af9c129e93f4d3d70b1750a111ee49f62363264935403eecb741e46ace56be237", 0x47}, {&(0x7f00000051c0)="3ddc8b89f7da1133266104f62c", 0xd}], 0x3, &(0x7f0000005240)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20040010}, {0x0, 0x0, &(0x7f0000006440)=[{&(0x7f00000052c0)="f375ea0a3bf81746b2a69f36909b5a32cb8ac433dc010e5d725eed45e196cb99b0ef4b26a93121137b338ce70664dd2b61c698b7e8c888c1817803f15cb98bf2ac3dd91fc0f29932a5d840ab677340fd73aba0e5fd7e944c13111eb93161778d575147116cd0e4e67c1ee35f4a86e2facea59da88bdb5372eb60573b97f4d02dfbca283c2b02844f32984b86f31fcd37b236e86d8089c54a82d5be2f123cfaa1d6c48038b51099f3fa7d6f7eff11f258b440aa2bd9eea7b715e2a45e7b664db0dc21fbf6f2c37f551dc45b97d828fd486a41960b5121994a7d1217b105e3dae626ac4c8e2b7cc54da39a8f245c7788d895d1881933435248f98c03e422c9ebfa6b2d4c907d6d419e198a9c285b98f74357cd82f10b1c03faa63bde6ade22379fa9d24db4d84fcd5bd205384a707c2dc14d44c6e396d818f172f206bdac9af6500df2c8c2f1534ecec919f52e9cebb2cf022d54a762cc174f69b8d3fd9f80240917f8520e79fd6b08ddc4463a79324f8843e35ea177e23f5e8c38e8a22e8f9c2200392c7c061696acf5605bf052fee938182336beb4013f7475688a7ef1625b239a0c1de5d359e7f98c5052fc54987dcf84101ed170b170aa9faa28b5bb2a4f7fc31d73d475da15cbb17d9437b61ca4888cf955db8c93d0742b90fd644fcee5815679c21fe9678fe17a0cec0ba555429bf07d32dd5761beb9f3673ae53524df64633abcb2772ccb872ebee836ad5713e5bc94178bdebaddf214239cba0dfbfb2d76bc61d7f5f9e87819ece7c3d6c1592f3ab60f2a3f6147a86c052c994f67a94ee037db88bc61468266ba583756555bfcf3f696014716f32178b402ec3fc6eda544ed37909f7913caf608ee6398f9b2f094db2c2f10885bde67ca0a27d045cbff788f0a07d398f5bb91181fee070bbafee998f014448ed71825f851b7aadef09575f243f7b14d34e44cb614f2f2325fcfcf3af21b6467a5fa0aab0a835dcb26d420cc218ba25497edc8830a723b9d251d2461c5feb0c84c002b09b82c2b864a9f52b43680de10e3030c7717f1841c0697b73fe642a8afb112b6383cff48a0f6185f71b5e7eef155b83663e539f6277c94a40e6695a01ee3e16ad21d649cfa08f006b78b094f5d10fbb76fbb75e20a43656e0cc7b3f88e43658a309eeca6b1a880db87453ba705afea42fb2a8811d7403e1f69510fcc0eaa400e6a9f7b00424fc62a3f87136e89b50cac14dc5e85370a4573c7df42ada374b905d573cd85d0995cc3e290047edee32de39f157ba4fe0619443e73a0e0ec8a67ae98d6cc89fe5bc7f0b15ae167925da1321b27eea35cadf3c2ca99a5c4c89d9d9d1fb3b372163c76c821496c19cf7082bf51e583b5ad546ab87e6e986de2b32425b1253801d8bf255750ddcc144675426087fa0a2a14be63c38873ea811e85586c97f60853e040a0a4d525b99b8fa93e6208359098c56f7b287e4226995e9cf4635f18a06446a640b117e3dc6fb5e9955eff0ad380418394ea5c93179d20d23c8bb5d40b43c88b9ade302bb01a8870be71763c4441e94c98fd0e659d9d65bfa3517de15facf13ba379dc1bc83b9795d8fff7a04cd314280c5b41cb65ce4b7cc93048cfe95980648001d49ed43c951b8da6ec994a8fdfffd312d30ccf66c5875033103864e34e4ce75020c72f02276ef02207cf2d21e4fb4ebe87b2a2f85bb4d655340767b49001f2e0fa5b391fd79294a68b824cad2507d052f45059f475add74dca78b6c980adccf9c2864131639d443d459f2d43bcd7a8bd4765225bec5f9a3ab23ea4e91baa345506802538b502d10e8089e83ab2af0fdb96f089214089b3e96c8c935cbe9a8f474a09e57b304b65776ed1543e8963cba1771693a4bcb6159e162b355acbe0d54920dd72288024deb4a3a65828496043d9c472d460cc9a26f7ad7685e43802ab09b3f5538ef21ef60637b6d8872985e0b2e072bbe61e78ffaa1c5c3d47db052fc4e64b1bc3de473339ecbdb2f49de5d38dc887976380faa6be45d83ffb375fdb5b580eb3d516b0ca4c5d984a3c238d6c50a22f933dac677d5bc182d07071aa268e469a212bad6760ea32928c9ebed674b9bf3d08dd939197691959081c4681cab2e2f9cf38d8a3917662451db4d099f20b6c62662dbbcb4cdd1311282c9f83c85a1829cdb4b88d91b562a0e101960e6dffefac44edd553a0f1c134fcff7729773125020a5991c34905cfef4140b028520eb5e376c72e5571169da6d32dfeafba1b7f432bda19fe169c9921554a192ea45ebd0b5f90add99076aaabf93868ea0418fe7e0e63090afc2f2c3e0e4b53b32b294cda8fb12ae782551fd81b1e2d6a37f795bce271d0b3d7feb4f0dd7eca70ef8c58fde93b951bd3e90df7017a8037c303b979a21fd33e6c1cfb891a2947d05de9c0f5ab1894b902472dbd453b78c706486b6a6b2bd3846675fc0e56e4987e05685aab686da77798a9ba1cec0c033fd7485894799df82137840263e8e71b1a949dbfb26095bf28d6a1afc7286b01b7ea12d39c658d9caced53ac40330d28ed424f0cba2128698ee3c6bdc955720289ef675a29cb1c806af92b730de12206487b6c827ef77f066910137d86b9c2ed7d221594f714da657392b6b5cbea8f05a76c0281a19e1739b439c9db3e0a70f54d84abdfe24315937fe811ff93e6ace878c69b0988a04fedbdf468bbc09acce6e3fa75323156c0fd8f5ef0277416a581f80baf0d28609e27e552ed29ea4aa85fa0b90f69ca266a5f74cf768f661f4bdac31188768dd96eb9fa351a93816e522bf2da11df13839e378abf3afe05446ec05879e7ba265189a4d22f83d13a5531eac842ecb3756f47b4dbb084666c1189f1d6cc9fd0eff8fa989ee07c5c425f2047f775ecac728776468974343afa034cf86d078c4266d911f51908afd67db1a5b74e7c88ea2de5cf90c9791559496714487643aea562065fad18d313857c2a27a3d1fa5e6552b6cf2298e073589b3b895cdf898f78fb25d0a5b151a6c7def88913cd01842c4e5557a5cb6a9b6abd3fa17f624c745723d019683370aa45fb925dd65faaeb9e13e1321236c2c358fd004bf439f1b058a9f885156ea6fc97faa114543c148bf239037a9d3e82ec0f7f3563d604fe761ac85bd343f0ea7a21899f8835dfdc100785f1e379b5296258a1ccc205561c26eb6ec5ae85b9dfdf13192372d8f8500fa39c97213d7bd1e474aeb820a2d9559aea9db1056287c4bd7b67e691c1b5da8518730ecb3805bbdc06766ba6f0a5e035e1588b1b2f49d0a2f17f357b13ffb673f7ad91ad965c8e04bd2c624a23bdb6d633529a8d462872333245566b5320bf9b431f00fe81e49cd6776e644541386eb910c6e775f8f939903a81063c4047f25c2bdd89c17d9305fee7fbeb2077551d0d3f4e76bee688912764c030412b6ecaa79d23405083625fe3b8261e99a552cb2c699692e89b2349404a11c0eec9174e86a86d835ef9a7245bc8828aa6bbc13f962c91503c2ed6075d2a1af02bb15bafdd595edeef522c01ea0d08368701fb7be598a7d4dea06d1ee422f26eb2a500cc4e58422ec33ee4aa065329bfa56be4a75e37043bbf079069fbcfbe5718c05be8be651007107a31fd54249bb2c155d23e5013f2e1c8c66e1f4e5d74c99798cab6bf4965f6c2a5ef84cea736edf6d48ce7719a49373580c6e05f3f135e4c1266a96a4ca3994e69f6acd99f43cf484120c0908b3b19999d6261f818d68eab3cb6251b2c983c2eff6d2e738a3dcdffaa48d434c205ef7eda8542dc7b98a0a36ef3dd073b251d06885f9eea71ccd479b86e1d7009a383ed685776e560e24ec16aa0b0317e2066b5807c96a2db859b1cce52a6c681cd3e29104a4eec3ac00b9d74bc456be482e9f5079971721a69bc6f8efecf070129774623c3d646e6a0660ce6abe61af87ad9e715633176e2233d63ec97b025f851c74331e4e14101f53e13e27f6f9a973b7fd8fd897c787b05222e1cbfd20387c1e44b0064ab1fddc324e8a131e345d604d55a7eefd177f02a36ceeeb4f1a22d0e147c7b85ce97e8cba8c6ee249c8b0d326b74b151ab540ef834012567019307fda8fbd62db4284186d590fd1ba6d9039a07529e593f676f847c7f511deb0773b7b36c77cf0f20f3c0b9e0ff61bbcbe254b286db698a0009dde2c46024ca115ad5b2632ffb93d030c7372899780a608f0aa205d2042ded53c4288ffad95ac1f766965eaeba0cd023e2c1db64c1afd1a40b8ebcbc154835e725e083f292ca84b95b40cf7e99c1d6324baae7de58a56d2b4179fba983a78e6d043a0b5eb2d750b08a62750a5ea37b88a212077a3a1e59937cafc0eb5640a9c38b9bfad421159b2ce877aeaf04e7a6926b30d489cc9d2b6165b03677024fb927134a25e41c177becaae376c89cd4f36a5edddcceba0349e45cd15360268b22c0a87113aa9682d48f49f172051a4d7a136510f55c0e2666a40e0e222dd381d8c4f4482a633b6cb9cbe562cdc0bda89ddb381c154a08dc346d6a79595bfb9eb756e0b68d6de6d25515198a324cbbc9c9146829f52a0a8e17b5f4241b5adcd53314ff0f79495909959ca8a3406833fd46c4e27065461ff58659349495cbdd2e970ef0e16c2438f572d793896942fff2c3cd88c94f77d09a05a9d661c92f1c8332a307c46355fcc8af11af2fe2521f680770bbc6a4ac0ee456711640e3f1a1007e0023bee15920019f26d1a6bf0a39427a6acf2810b71a8cfa1d15de7f472177020f4edbbed259d49f54d9acd4f94d4835598d1f31d0ca360ff5c691f8d9f912b617a7c1c9737fe0fc9bac9f033742678c17ffbb53931930190f0f22eefc8193c88036932db42f11ad2888590f87d8f25f9ce8dce95c468042bea140e0bd913598c712070aca3baa0a4381e7f5de2a928783fea7a5b20971e087808e3b84f810d7c148694f5d2b9e96155deffb490f0416b9e9900d94ef320d2fa3fa429aa79b6dcb4061c1823227683d0da00c65dbfd2157c8d0e1cde004d7c68a1965d2cc00fba1b04c297341e2f4db5c3a91c5c2edb4fadb2f5edc5f5c58b9b4b401e6800dbbcb994bc07e06d0dbbc0875ee9efe712361c2ff22a208f2a5aab58e62d5526e29a04a521ba3829f46555ee55c1808f8a94dba36ba1778c600e1ced45557a0dcb63a94997de4a71be79a583b9c577c759b582aaf3c0491d973794a6c8b5978eb2b18b3fa9075a9b55c0287bdd1f3e4282534b00a1dfa525b7313d9bed111d7921a72e70dc00573c26deda117087c91859ff7a5eed6c5ce858f6615d4481b6a4c532ff412513b34dd012979f39356d173243dd23dc65d839242a423801dcecbe8c90b0114f44801a9fef29270bbff424476a6e756abc95f6694d3b766fc08039253020d563ec79f3619f151bc66219b961463cba57734025997e80078956d9af601b4095479b7e5f5f8005df41d35e4c6d19d3bfe91e0738d2a10519e41cbcc958014422f235b987aca39341fd061c7163cb16999c9ec3d87491cb72814799c3b9bb0111e8bb6e027d7af10b02775bfa84c710039458cc8fe8cfeda3b2d3d57fb76be170b085d0531ff451f0a77c49bf255fb40c3b1ab02a3d371e00605f26ae63874106fdd76cef1b04cbfadb81e5a0deca89219de8b3c82b8337f9af0028f489d47b96f6155a6cb203b06180c8a83f76353eb48a56b6b4eec104b67f015e99af35ad000f2f56e31bbcafe3208f6c12b84b1e8eb703bc943689f32722d4c34db0c89adf221e77469aa15bbac45279b8b1552a9b30848397f", 0x1000}, {&(0x7f00000062c0)="8c415f3173585dcd1a02a3d2986ef5d8fbc2a472b1afeb4516e969eaf2259cfb9f8ec4d0519212fffd80c307dccb37b15d031cc8eeed48e523fc035f704154529af29d61c3b8ecfe930d0bce3163a65748edd766513576e06ffaeb1238e18b641197a7827b73e5bdc1b74c5da4ba9573c9d92baf7b5c39bd3aae114fabdcb5", 0x7f}, {&(0x7f0000006340)="ca33c593a04d5c67334b48f931573c1f0dea1333f3aaca86553cced27e21150459fb1047804110fd86a6231d106e1bf16d772ba1c7f6f573f32e19446ba891718475af0f164d7bbd4e20c85073ce1c5bd43d0fcfa364edfa4451e2459489cf44df88dc9d6bbfa8f0e4fe36300ab63befbfd2d3d2b17783b8ef6d04d0bfea03c7b073efba0a64fbee3d253aa9378d12e313d255b02b9b93778636143d9176f5ca8e8d3bbcb1ff395fea12e9e4b70cb69fd10847f77a68abc7e02a9cb0829dad6507af1cf1fb9e23eb9c3978619210b9bb8e347627839175c81064651a641eed", 0xdf}], 0x3, &(0x7f0000006480)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3f, "8081467b6e5318afe44ea22bd987b40b33b494a6c130909f68e095468c1ae410d4a4e3a6e07077fd3a1748a4bb9465b0596bb5bc4986c445113680677d147e"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0xb8, 0x8000}], 0x6, 0x40044) getsockopt$inet_buf(r1, 0x0, 0x37, &(0x7f0000000080)=""/48, &(0x7f00000000c0)=0x30) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c6f6764650fa8695c740d496a2c00"]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) 18:19:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r4 = msgget(0x0, 0x10) msgrcv(r4, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x3, 0x1000) 18:19:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5000000, 0x0, 0x0) 18:19:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) 18:19:29 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x590, 0x200003) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x1, 0x1, 0x6}, 0x1}}, 0x18) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1698.952333][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1698.952349][ T26] audit: type=1804 audit(1555611569.623:4680): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2388/memory.events" dev="sda1" ino=17446 res=1 18:19:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f6764650075282d7b8817293a03d3ac15d0a56c8a923b4ad4b16b2ee3d40192c46e9baea76b241cf712e11f5218ed018dd3f49d94189aa8d35bf360e19128397d544a55b4c212d205a735de0f4517cd016518ac6411aa07a4be656937d05d95ae7875c365e4f5b6cd6e37abc741456a985c7591482216d61f3bbdf946431c0d7efda4b50c21939f5ea0e2f4c6f00d3f752d3f0970d3fa6a3ec995c026c709c5c526a6f38110a32400e433e654e98ad20a6c"]) r1 = accept4(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x80, 0x80000) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) [ 1699.107249][ T26] audit: type=1804 audit(1555611569.623:4681): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1962/memory.events" dev="sda1" ino=17634 res=1 18:19:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6000000, 0x0, 0x0) 18:19:30 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0edc1f123c123f319bd070") ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x4, 0x2, 0x9, &(0x7f0000ffc000/0x2000)=nil}) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys^thV}\xadM\x8dTs_^/net/ipv4/vs/s\xf9\xd6\xa7\x7f\xc7G)%y\x00@\x1a\x94\x9bn\xf6\x93H\xf0M\xce\xd3', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000080)=0x903) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000280)={0x6, 0x7ff, 0x4, {0x77359400}, 0x2}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x13f4, 0xb48, 0x9, 0x6, 0x3ff, 0x4, 0x3, 0x3, 0x3, 0x7, 0x5, 0xffffffffffffffff, 0x200, 0xaa, 0x4], 0xf005, 0x400}) 18:19:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x0, r1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0xfffffffffffffffc, 0x15c, 0x0, 0x200000, &(0x7f0000000280)={[], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'logdev'}}, {@appraise_type='appraise_type=imasig'}, {@fsname={'fsname', 0x3d, 'vboxnet1ppp0'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_lt={'uid<', r3}}, {@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user', 0x3d, 'xfs\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x4, {0x1, 0x5, 0x40c7, 0x70cb2574}}) 18:19:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7000000, 0x0, 0x0) [ 1699.640217][ T26] audit: type=1804 audit(1555611570.313:4682): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1962/memory.events" dev="sda1" ino=17634 res=1 18:19:30 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100a00, 0x500001c) 18:19:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logdef=./file0,\x00']) 18:19:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) 18:19:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0x81, 0x18, [0x5, 0x4, 0x80000000, 0x81, 0x8, 0xffff]}) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000100)="ae75e842ea71fd6da89b9f2723cf89adc5") r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r5 = dup2(r4, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7000080, 0x0, 0x0) [ 1700.244194][ T26] audit: type=1804 audit(1555611570.913:4683): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2389/memory.events" dev="sda1" ino=17424 res=1 18:19:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="0510280042e98787bca07354f8e1e688b24b135f70851e20d9b2e6d8083c393c2da442c93b568d207832f11b0c4907000000000000000bc1bbd937a1ee7b9ace1b98f9448d0516ee7387125b471c0f46e45680dcb2c8836e5d0c3ff0a2d9c1fb4443aa7ed38e7dec0cfd3488695ab50cff3cf20ec2143137851a4d2ac4cbc76f81aa8f1a07a30a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 1700.335026][ T26] audit: type=1804 audit(1555611570.973:4684): pid=12257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1963/memory.events" dev="sda1" ino=17634 res=1 18:19:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3ff, 0x2000) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000100)={[{0xfef, 0x80, 0x3ff, 0x2, 0x10000000000000, 0x4, 0xdd5f, 0x7, 0x5, 0x40, 0x401, 0xa, 0x7}, {0xfffffffffffffffd, 0x8000, 0x0, 0x5, 0x0, 0x9d06, 0xfff, 0xe504, 0x41, 0x4, 0x2, 0x0, 0x7}, {0x0, 0x5, 0x7, 0x3, 0x100, 0x9, 0xffffffff, 0x7052800000000, 0x401, 0xfffffffffffffff7, 0x2, 0x3, 0x7fffffff}], 0x7}) r4 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x7fffffff, 0x7fff, 0x5, 0x7, 0xeed6, 0x9, 0x8000]}, &(0x7f0000000180)=0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8000000, 0x0, 0x0) 18:19:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f67644d763d2e2f66696c6d302c00924dd330c01e13bdb9f4a39733e34421ec8236f49609bbfe0ecf9e53a3e7bfa8cc0daa5a3cfdbd2de2c71c95eb76c6fbfafb11f8b1d3db953445bcdb9b5c799d9983729a2eeae0c964d7f68aec96cbab3023d58ecbf87f46aaf247ba88ae909cd6459451c578664640c774895c7911a63e7fd9e813a33871fe30bacd5bd231d5529206c566faa759c2e054bd353a03d5e313c0bb437104e2"]) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200)=0x1) 18:19:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffffffffffffffc0, 0x8001, 0x0, 0x0, 0x14, 0x959d, 0x3, 0x2, 0x4, 0xffffffffffffffe0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="b8c2302c00"/16]) [ 1701.109751][ T26] audit: type=1804 audit(1555611571.783:4685): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2389/memory.events" dev="sda1" ino=17424 res=1 [ 1701.192135][ T26] audit: type=1804 audit(1555611571.863:4686): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1963/memory.events" dev="sda1" ino=17634 res=1 18:19:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe(&(0x7f0000000140)) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8000080, 0x0, 0x0) 18:19:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) 18:19:31 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100b00, 0x500001c) 18:19:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1701.233253][ T26] audit: type=1804 audit(1555611571.863:4687): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1963/memory.events" dev="sda1" ino=17634 res=1 18:19:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) [ 1701.340543][ T26] audit: type=1804 audit(1555611572.013:4688): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2390/memory.events" dev="sda1" ino=17441 res=1 18:19:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0xd3, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) [ 1701.505161][ T26] audit: type=1804 audit(1555611572.073:4689): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1964/memory.events" dev="sda1" ino=17648 res=1 18:19:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'q\x81eue0\x00', 0x4}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9000000, 0x0, 0x0) 18:19:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x4, 0x7, 0x5}]}) 18:19:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) 18:19:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x101000) write$capi20_data(r0, &(0x7f0000000080)={{0x10, 0x1, 0x2, 0x0, 0x0, 0x9bb4}, 0x10, "f0a59a12d2c560952aa8a9fcdc7f1bca"}, 0x22) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0xe0001, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x9}, @connect}], 0x30) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000140)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000300)=""/149) 18:19:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logdew=./fyle0,\x00']) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) 18:19:33 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100c00, 0x500001c) 18:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa000000, 0x0, 0x0) 18:19:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f676465773d2eae66696c65302f7ffd4588f83d532b45bab113641603dc00317a0ebecf32b9c7221487a712c3a5f6dd948b8fa69182a3903b"]) 18:19:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r0, 0x8, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = dup(r1) ioctl$LOOP_CLR_FD(r2, 0x4c01) recvfrom$unix(r2, &(0x7f00000006c0)=""/224, 0xe0, 0x40000040, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="68010000190010062bbd7000fbdbdf25ac1e0001000000b2f841ddf57ecd000000000000000000000000000000000000000000000000004e2100404e2400000a", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0xc66ff0143deb18ed) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='l0(\x00']) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) 18:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$SIOCRSACCEPT(r1, 0x89e3) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xb000000, 0x0, 0x0) 18:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 18:19:33 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100d00, 0x500001c) 18:19:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x53ac, &(0x7f0000000000)="0adc1f123c123f31010470") syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x10000, 0x0, 0x0, 0x100000, &(0x7f0000000080)={[{@inode64='inode64'}, {@bsdgroups='bsdgroups'}, {@gqnoenforce='gqnoenforce'}, {@qnoenforce='qnoenforce'}, {@swidth={'swidth', 0x3d, 0x2}}]}) 18:19:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) write$vnet(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/60, 0x3c, &(0x7f0000000100)=""/111, 0x1, 0x1}}, 0x68) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 18:19:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xd000000, 0x0, 0x0) 18:19:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) close(r1) 18:19:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00'/16]) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'nr0\x00', 0x3}) 18:19:34 executing program 1: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) fstatfs(r0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000740)={0x2, 0x0, 0x2080, {0x17000, 0x0, 0x1}, [], "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", "e0730a5d48bc113888df26add8b752ee988b1313505a388ea5c1e04db7847e52042f481dce65d6b2d05b3d4a60e74a22c5953c64783896c53f404abbbdb9de3715b9fa7d37be0e48e88cf3836cf4d689a29d538fcfe867fa5b7cc44c45477a7d4402c109e7e79e74712e64b958a98a9fb10421e300bec0f76e2e65d411314b5dbc493ce828bb211c4425ec32e6be4da7afb82455477153f8e177d1f0514e19c921a65a868a7863d8f6e29fc5d69289b0c3b722cc1e5bf766b8cc015347a3f7206817fc181595510990f110980f7a29aab9d55b6c43d6b6fa5fa17aca59c2b2e875a66725ce3310be922f30619ea00aeab3e2413547554114e0a351a9d52fb59f616b38d1235d3a2665f850ebbe1783989603db415131c70fe648386fa024dcd7d2f92ff7abd346014a1be0694715e6afe696bddeaf031d792d0b45c68b87b5ada6a8260c899e35583b59b2ca7e1ce578f4e79e5a61fb317a19428583d2fe163542cddce844cc0d5e5cf6f1604512c5ba9e72a5487b6da2422b484dcb3c553a520eafc872ee448874887639c48b963d5fb6d5ec4bcc8821002b8fb0e8f2082342a105a8596c8d8e887ee37ddad8607c0a94fa29962cbb0d3a3f7cb39d998a60c9c6c6b739c5b1f4e66aee4b5b657341d98564f425084e4d93fab206150e67a8f316b526d6003728818ca4398e8ed3b44ad91ce9ad68adea1e507e7a6319b3fec4668fa416fa9ee3760fcc572f932f0f4bce227ae10ce60a6264cbb02adaa10926709c293a7b04048a39ad24436c4fc622e6e0f216ed9689a6c25b681c040059976b3106aaeff9aae2181a368e66b3b778c50dd4abd27fef3128ece5b6e12352c6ebff44e6167334b9593fef5d3b25ecafc056e12c437c5bb3203d44a8e4c464c9e9e69074ad5120729d6993adb3877800e74b1440aa8509c7b4d232f77e6ace5219b052230adad1098d1e121cdcc992c6dff4957742d387e9054230c32252ddc10c5503117dca307f69a4360b47232a12cde7aab8f785a86214d0c35d8cb0d0fe22c24d1de1296a91b9e6e4edd45c0e57ac3a0b6e47532f09f95d948adda89dd5f134a37426cb86e001ef4451f6a363c27b885bc371f2049c42101f9fd38b4f7762ca3b90775df09a537463bfa5034cc3fbcc086d1132ff642cb4777d051f373bc84d06c04afd541bd5f2bc06bc0eeb0c7aac664dff300e8a866ac40cbe1b5319e3fddef8080da6542979d8a4cd64bce9cac6409518dd821b0191ae908117fdbea8ef4d8c00897da5cf01a68bbecb734b60a6c53f77cbcb4d7ee32f1e3468341ea80e579edfe0de4520679db01464e2c23ab70ab31f3b55ea4b12a1e51af3fed493bbddd9444f32e4e0f6a375d5e70c7b33b29e7e7e1f0d5cc7b6707261827638c1965998fc7ffa30d84e954ef3ca1086d30e0d19a6022a952069ced7f5f89eb05c549478fcd5dcaeec76386dea5ab231d01acacf2f3306c55db48cdddb566d298833c2217465d86e8b8e6c84121464d5dc56f043dec4f1ea4c5a8a72274ef6627922a209a439b48b0866420651ba691157b2fb6e6e341ca5995055d6b9bad2519b1ec360ebe3a61e57dd99573cce66213b5edfebde126f0a1fdaa4b245d78a2c86f301bc9a1c68bcc826d41bdf4739e39f9b063a2389304000371daa8c1762df7c6651b43821ade368b57196d2ebe0f92b7cb92a1dce110732061d7ed4662bcec27e9d212654f4ae293a6fdc0a06a2bf2a75e820559f025321249e873a3ab1f662c3274bd09e92abc55a6324f9d9825d84d5d7041e0647af030a4513b9c11d2937263218f4770cb8b43385aba087be7ea4f1ccd74c84bee1f11c3a5abfc71bbe87d32c479960b26f6a93c0d40105683b1032ebb9a71dc8ec3f4eebf835e31387972974d26d4956aad031475fcf36a5a39d8491e95dd442ade99df020aeef8f5b45fb262139f4151e94dda14c791c7c4edaf7e23552ef7fe92e777c6ce38b46c9ec76ee5749ceadc37f839949b5919a86f98f6012ee9980947140a3da3a16830130a55c503878a50632bd3ddab97724dd8be2b451e547ac334e2cc230b12504c4f70a75c237c4223b800aaaebe39150f5950213b5fea96ff640d8caf1f408c54bae7802e8aad345d254c8b05d52ad85129c27029e179bec118ef578988c2df82b6bdb73b6e4fc4b6716a1bb59789b8457e142d95253496158ca5519a09e9e5c523981cb11267f689fd794921042cc434e702552ab67a6bc7a26db062256773e29d16acbe739a14da13bd49ddfc34669e796a5421ad498df76139f083d576de602f732fd8dbe39822e24210bdb7a61205f7610ca56553fba73d221bb7ca2e64505829c18569b2a5e0a789afc8f8148612220dcbacd1c3ab8fa1d0af6c198acf313a99b98054ba32589fbb447f594a428dbb42b13ca85551d3e568893f6958cc9bffb4f429f348c660411e884fefe18464022d6f553d5a6ce421524bcefc26dbed6e996beadd26666381c15f4aa382deb64e6b5b32572da13460972733d74b48c0279eedc3bc0c47f54c7ff8b4a836d2724a825069184f6037d6e34208fc0a36946d57f6300a647f88b933a3223a6405d87c722a120b029d28ac3761bcc4bf3c2a61298712349f95181d48afffffcd9d5c2ffa86eeaed805051ac80e756a1e06fa10dc8bd3691e15093aa984aa8c516eb8af4c40949127d1a744b5f7ccaa3951fa833a25863b608af250693f5bd810a2156386e56bf7363179d586393317294cff94b94af281772e4892b656ac5f73e4f91983a84f5d98d500f27ecd4f6e424ff6dd6db4d4cbf9a73b21cf7d40d1212dba4b7de84958fb476947b8e54678a45e132b7102e3f22826a4ec6af6e72815df4b76649a9ad4753fbd779c0f02fc0bb2f1c094305eb9d17e04603464c2cb5989118e42d3fc2836df8cd8089303c6f88311e2e1de73e55a7318488181f03211199fe49e93462aa163e38645e2c262b6c8c0cffc90a4cf4f6fb275274d36d7ad0055fcd153688be360bdf764d228c2df404409e725e53e639e866f267da60f1263751e3e71a1180f3391be9c338e9472168250cbfd530c87a1cf208dd6fbe97e6e490ce864dbf0a7382d6000cb54c34c034f3c104568f60c1045271f6435777dc7c659f8eae83c0f7e9f72933a2c232dd4047c395c8432e5cbc753132c74e570584767ea031a28c7a0d46d3d87477f358175d40cf341fc0edbeee2f771dd6b0eb67010f72de4a79db7c8759bc70061f75709d52fe4ff4506dddf78bc0b585d3e896e3481c0d8a41bb5637cf973ce1b97e588d6827cd734ee9710ab504882f55b6c954f52471bce424e947a94508e271dfe88295089607c9104f5a4d5808645417d072c1b2ef7d27083d0599c5b1482207d37e4eaa50f74d3e8ad2df0198a6f95419ac65a404e349eab7569a12f79b035b6d0dd046e7c159787ecd561ce7df2aa5a93047aee0865a9a04e06923aabab25a8cf6283fa997b95cf45660000cb2250982339b2fee440fb112b0d3594ce437e77d892e5cc53f65108b939074dc68d81e68350bcddedac149d007d4adfd6ae476adb818d604e8aa3b9f14d9c995f68215af50cc978ea883d78b1752c3a88f6b80e5b395be9af5bc5d65a8edc38167446e0608d8d7f32882a07c04e35fb799a9d3566dbe9569cd25b46d722fa3a44ff394230f6cecbc5c27c57eec980a6c127436e981652363933f4f73b0f617b7893f65964ecb3eb5de5ac5e8c91a3d87c9208333dab6c79e8d94084e404be5f266e1b41fb7ac8d6cd465460b0b5c103e082f2b7348c94de2598a7b6f406fba1618ac9c5ab6f605a991d797b0e32b8243134bb6b2a8fa52fad57c55c157543d91248bb8ba5a0b5fc767cdc43b6ba4838c3aa6294a20a6fa82d57df8180418aeb93e0a6f396070486e45339f2b7456c95d248a414474f5e0fda655de3bd8e4436c9551c8077b3e66950f5b2c11a0218f15c9b6b60870552226ef69882afc0d961a206be7e5844144425aeca5558edc8f86b34585b5ca9da11a22843e16ad37aaae0e9f2e49d40df037f64733fa414ba31a98a80bf264dfa00c7c4ae6b4ae64b5e11cfedc38f9f3436ddd6fbcd6cc6c671ed6ffaf03e84c1a33054c37bc738acfc25bb2b7677bf7c452df49eb3f1ed888c7abe53a4287df7901bbbed650c110e43f94bef980686c3b0ac77d74c21885779c87f7941ef0be8d0c72a227f1fe3c34e6972a1c29745beacf21ddb95b5b1c0585b42b5e3608045c5715a558961b6c3c29868ec0d6b0c5aaddccc0354eb3171049bd9a787c09a75809c7bdb26c81913da987ca33728b22d56657415abea4fc8ffe1fefdebf30bbe7fd4f6b508372a02d413bd338eaa4a0436636a07c39fe565a7b5208e87114e10684a86a7738e603b9f85ed2adbac1977c7cdb6b5445ea5b341593854ce762ab12d9e132e747d40be0999dad585cbefb6d499054d5fe06720c454c9ce38fceb78d392a3bd464c490edcf624506b8dbbf4043b6a6c83c9fd341696c2f0824261161917793b65d6ec17cd8bb40084aae749cd529803cc3e8cc7cf7b3caa77ae58cd0ce4a16f124b92f3d01dcec8ee2ea2f736b67378af00c3cc4fd071b5df6df3bf97864292cfaa6410e6c67694b16e3967131bc5bb163f22bab4459b202089ffea80467472f75be6d2d29f659f52e720f50eae15f6e959803d450f53e7cdc6dde1caae3ad03b112e18eb389d7a939cb8f834fcb13a7bb27f52d67e8641e59919e2319e42eb98151ac0f9886c14149e15c4f4cb74796ec8fb060dd82a01622afa19523d1baa72d2a2ec8ca675c8cc825c84121350e4387686421aa4f53b6c9b1e0215db3187fd20c9d8d2db1348268d112fae726cf9063415316a114e8fbd0557dda62c8f4bc76744a824f089b79dd32174857d9aa8ef8a911dc1481c7326d294f8119201034eb279ead99f59003a06e29f9ad3d06edbd90204d14008bef762f056279b79ff3fd7adcff1fafbe82d9eea38dd8c14f684ad32f08ba52a1abd3f55c972cef93ac7373d76a3f0352326a74db086f82db0a47fa350ab4218b78e5edff1bc28c08506cd1cdea6b7a1267f03757ad3e889d085fce186743dfe80eb23d28e798f423aac228641fb4f6a83acf1e3c7befd9197d6c9962f6cc33fe3d4bf03a66170969b4177ecc59e8a8b512a2448508ed652c784c2ab92de7b9451bbd830dc6908c8591b62896a55c7e883e5a69f54757fd2f517d286618df369aa59749d896a3529e087766fa4b7573c2a2bc68d2f9b6ce1d3aa7d2a86015d45582db8844f02a89c0f2630489ab79c2d924f1689799116df60e3b5d34e4fa36d91fd158fb6223e8126bb14d7eefb0590644cb366f49181f80dc93d1bb466c4fb8e3a9ea4f35056c78add70c4f07c4fa5aec5a489132c1ac2c57953ff0ce1e0aaacd18f745aa52867300c3773737e6a1af6e6314606a83fa16f85da995caf186d808472c30cf1267b497afa0dd85ceac2bfef148ae59a3f4a6879dedd3a87866f8b0dacdc640e237088e3bd9c68bed26282cb05a4124487678fe4d1b521d4f27249180806130ec9a68dd8b2eb86db7bf637fe74c075c91a43341b9ab56fd8ec19ce1d0f88c0f2b86b6b1a22a38ff9ea177e387f498244debe88b9727c6d8ce158ae4525efef5cb70754a65d69b73c772611ea8a3c9652638cd485ac72533facd79a2d5d28af44c29ecc81bd8ea62952eb941f0e453e389f37975ac05641f049955d79a4811d2110ddcf750dd530a4e07c89615c033a60eb0fa7056e8e864888c2dc815aa"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x1, 0x0, 0x0, @tick=0x81, {0x0, 0xc62}, {}, @connect}], 0x30) 18:19:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14000000, 0x0, 0x0) 18:19:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, 0x0, 0x0, 0x1000, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) [ 1704.156743][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1704.156760][ T26] audit: type=1804 audit(1555611574.823:4697): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1966/memory.events" dev="sda1" ino=17025 res=1 18:19:35 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100e00, 0x500001c) 18:19:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x20000, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x9, 0x3f, 0x7fff, 0x9, 0x3, 0x11, 0x1, "4d9fcd15bc0f349f51b54ff5691dcb0af437fc6b", "7ce84403234a052005329cdec3d4c15ab02db79f"}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x2) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x19000080, 0x0, 0x0) 18:19:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000001c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) 18:19:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) [ 1704.654202][ T26] audit: type=1804 audit(1555611575.323:4698): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2393/memory.events" dev="sda1" ino=17233 res=1 18:19:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = dup3(0xffffffffffffff9c, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x100000001, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7, 0x1, 0x1, 0x65c, 0x3, 0x2a, 0x4aa3, 0x100, 0x0, 0xffffffffffff8001, 0x5, 0x2400000000, 0x80000000, 0x6fcb, 0x10000]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r2, 0x7f, 0x3}, 0x8) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socket$vsock_stream(0x28, 0x1, 0x0) [ 1704.756380][ T26] audit: type=1804 audit(1555611575.363:4699): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1967/memory.events" dev="sda1" ino=17297 res=1 18:19:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0xffffffffffffffaa, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,hash,obj_role=.,fsname=[trusted,fowner<', @ANYRESDEC=r1, @ANYBLOB="2c6673757569643d353f39662d37617f372d752c3b612d760062652d37053535323937632c6d6561737572652c7365636c6162656c2c6f626a5f757365723d66636f6e746578749f00008002756e636f6e66696e65645f752c00000000000018e2959b0f899b1c9c897b60fa09fced65d4fa08d43e84b11048b63e69aaaca781cc6344492e4d141eba214100f75ce289663132a71f5750d53de369a5818f31d5c7cd793739397e1e6c5413f7342c3e49e233ce528cd41a669758de54a369f62a37633e051df2e905163a708e30adcd52f868a8f2cb0ed3673bfff8826c98c10d74c8a8a4a7"]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x428000, 0x0) getdents(r2, &(0x7f0000000100), 0x0) setsockopt(r0, 0x5, 0x800, &(0x7f0000000180)="64961d33745b4cc4b5d17917d3131a5bb27085dd4f8614ed58e8960df18e20c4489f8bc31fc9bbd1381c3affdc768378872013f467e2cd851f6c9e4b75a1185a412ebadb16c2aa039375381f67c34dd4745f11844d3d9c4991d972ef7e1712ebaee03db338ff80cbf2672409e230f5cebd4097be8802a8077a75d84b02791f22909fe8c3625faa46742280031404fd3623a8fb76acbefe33f0768afa8061e5719bc8e5d7e0aaf4c7df98520631f81b7c5018540b5c9a813998176ddd4608c8562894d1268cefdc7c852bf5558ef0851995c96843be4bf30676992c3eb88759d5bd4f6e8060bcc1f0c06c", 0xea) 18:19:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1705.312610][ T26] audit: type=1804 audit(1555611575.983:4700): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2393/memory.events" dev="sda1" ino=17233 res=1 [ 1705.445332][ T26] audit: type=1804 audit(1555611576.113:4701): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1967/memory.events" dev="sda1" ino=17297 res=1 18:19:36 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100f00, 0x500001c) 18:19:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1a000080, 0x0, 0x0) 18:19:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6c6f6764b7ff3d2e2f66696c65302c00"]) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x2, 0x9, 0xeef8, 0x3, 0x86, 0x1}) 18:19:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000040)={0xfb}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1705.475612][ T26] audit: type=1804 audit(1555611576.143:4702): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1967/memory.events" dev="sda1" ino=17297 res=1 18:19:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f08e8695f65763d2e2f666c65302c0035c1db2dbe00"/35]) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x40800) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x4095) [ 1705.588880][ T26] audit: type=1804 audit(1555611576.263:4703): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2394/memory.events" dev="sda1" ino=17361 res=1 18:19:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x131000, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x26c, 0x7, 0x968, 'queue0\x00', 0x200}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x18000008}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x541}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e0d}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040005}, 0x20000004) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1705.739051][ T26] audit: type=1804 audit(1555611576.323:4704): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1968/memory.events" dev="sda1" ino=16544 res=1 18:19:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1d000080, 0x0, 0x0) 18:19:36 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 18:19:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000002c0)=0x2, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) seccomp(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x0, 0xac05, 0xfffffffffffffffa}]}) r4 = dup2(r3, r1) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="19ecec185f8a", 'caif0\x00'}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080526bd7000fcdbdf2501000000080004000200000004000500e8b143b1ff0f0000ed921dc4123d7311510a9d930c806f037de42aaedeebc96b873fef515404464b187dbcc29f4b0c55bce7367ff3e65a63489da31972a770e803252f1cfd11ceee45245646d0aadd2b1f9fed4a1b538501c1822d35a5f40a470b975f3a424758e75f"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1706.385137][ T26] audit: type=1804 audit(1555611577.053:4705): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1968/memory.events" dev="sda1" ino=16544 res=1 18:19:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 18:19:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(0xffffffffffffffff) 18:19:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x1) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') bind$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="080325bd7000fbdbdf250800000028000300080004000180000008000300040000001400061ec6c45ae681d800ff01000000000000000000000000000148000300080001000200000008000500ffffffff14000200623e6e645f736c6176655f30000000000800080006000000080007004e2300000800080007000000080006001815000008000500030000000c000300080001000200000014000100080009001d000000080009005f00000008000600010000007800020014000100fe8000000000002300000000000000111400010000000000000000000000000000000001080007000900000008000b00020000000800090001000000080004000300000008000900fcffffff08000700096113b14db6e9ba98c268147580260000001400010000000000000000000000000000000001080008000010000038000100080009003700000008000200bf0000000800080008000000080005000000000014000300fe80000000000000000000000000002600000000000000000000000000000000d964ac648f87548fc391fa3f9842c32a214054bdda"], 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r6 = dup2(r5, r1) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDSETLED(r2, 0x4b32, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:37 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101100, 0x500001c) 18:19:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20000000, 0x0, 0x0) [ 1706.417959][ T26] audit: type=1804 audit(1555611577.093:4706): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1968/memory.events" dev="sda1" ino=16544 res=1 18:19:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x10000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x60}) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='logdev=./\t\x00\x00\x000,\x00']) 18:19:37 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101002, 0x0) pwrite64(r0, &(0x7f00000002c0)="5a500075c46ffae54d9c29dffdae6fa4deb353a0708811d0c584dc76f2848aa46724cbc8257dd54741f04ea3f509caa18e3ce7917fb700d4b158bf8bb9f5043370112cf673fa65a96475901e39c85d7168edbb5e0455fe63f23816896c08d49f52e233b64acaf158ede7618fdbb8c10b3b1489a6331bd439767bb9c392b982d668ee5f50bdc3cb", 0x87, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180)) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4b1df431030000000000000040000000ff0700"/33], 0x21) r5 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x2, r6}) 18:19:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(0xffffffffffffffff) 18:19:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x802, 0x88) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 18:19:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f000000, 0x0, 0x0) 18:19:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(0xffffffffffffffff) 18:19:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x4000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x4e22, 0x0, @empty, 0x4}, {0xa, 0x4e22, 0x6, @empty, 0x5}, 0x5, [0x2, 0x80, 0xc4, 0x6e, 0xffffffffffff0000, 0x6, 0x7, 0x5]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000180)=0x4) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = fanotify_init(0x9, 0x1000) connect$netlink(r3, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) r5 = dup2(r4, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$eventfd(r5, &(0x7f0000000140)=0x180000000000, 0x8) write$sndseq(r3, &(0x7f0000000000)=[{0x40000000000026, 0x9, 0x0, 0x0, @tick, {}, {}, @connect}], 0x173) 18:19:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x240400) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x1c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) close(r2) close(r1) 18:19:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40000000, 0x0, 0x0) 18:19:38 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x501000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x60, @time={0x77359400}, 0x0, {0x0, 0x401}, 0x1, 0x0, 0x8819}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20800) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:38 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101200, 0x500001c) 18:19:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x4, 0x2, 0x27, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x80000000, 0x8000, 0x68, 0x5, r4}, &(0x7f0000000140)=0x10) 18:19:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x37, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) close(r2) close(r1) 18:19:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = dup(r0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x5f, "ff87efdbd56327f09b9deb578e1e9f597110d8432f34e2202fde0a67dee4a0a9bb94c242a5455f5913bca1929d9c26a3ad72c6d0b6128eb4150d837b980d1ce4ba53647256c86fc0e6669749732d5e246d00deedf65acd7293927e3f49a1c5"}, &(0x7f00000001c0)=0x83) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r1) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000740)="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", 0x1000}], 0x1, 0x0, 0x0, 0x40000}, 0x800) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40000001, 0x0, 0x0) 18:19:39 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000100)={0x0, @ctrl}) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x2040) r4 = dup2(r3, r1) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000002c0)={0x0, 0xa, 0x0, [{0x7, 0x9, 0xc9a, 0x6, 0x8000, 0x9, 0x7}, {0x7fffffff, 0x1, 0x3f, 0x8, 0x5, 0x100000000, 0x4}, {0x9, 0x2, 0xf4, 0x1, 0x7, 0x5, 0xb69}, {0x7f000000000000, 0xffffffff, 0x0, 0x200, 0x80, 0x9, 0x6}, {0xff, 0x8, 0x9, 0x9, 0x0, 0x59, 0xffffffff00000001}, {0x100000000, 0x7, 0x9, 0x1, 0x1, 0x800, 0x20}, {0x1, 0x6, 0x1, 0xfa9, 0x80000000, 0x2, 0x1}, {0x4, 0x7ad, 0x81, 0x3, 0x4, 0xad, 0x4}, {0x5, 0x3ff, 0x401, 0x81, 0x40, 0x6444, 0x3e}, {0x7, 0x4, 0x7, 0x6, 0x4, 0x9, 0x1}]}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) prctl$PR_SET_TSC(0x1a, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000200)=0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x6) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x4, 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x101, 0x2000) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000180)) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:19:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50000000, 0x0, 0x0) 18:19:39 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101300, 0x500001c) 18:19:39 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x8, 0x5, 0x294, 'queue1\x00', 0xff}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f00000002c0)=0xf001) 18:19:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r1, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x80000007, 0x0, 0x0) 18:19:39 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x80000008, 0x0, 0x0) 18:19:40 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) prctl$PR_SET_TSC(0x1a, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000200)=0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x6) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x4, 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x101, 0x2000) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000180)) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:19:40 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) [ 1709.976739][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1709.976754][ T26] audit: type=1804 audit(1555611580.643:4717): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2397/memory.events" dev="sda1" ino=17617 res=1 18:19:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1710.139008][ T26] audit: type=1804 audit(1555611580.813:4718): pid=12714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1971/memory.events" dev="sda1" ino=17650 res=1 [ 1710.187538][ T26] audit: type=1804 audit(1555611580.853:4719): pid=12714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1971/memory.events" dev="sda1" ino=17650 res=1 18:19:40 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101400, 0x500001c) 18:19:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x80000019, 0x0, 0x0) 18:19:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) [ 1710.261159][ T26] audit: type=1804 audit(1555611580.933:4720): pid=12719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2398/memory.events" dev="sda1" ino=17601 res=1 18:19:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0xa099df516e0753f0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1710.557055][ T26] audit: type=1804 audit(1555611581.223:4721): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1972/memory.events" dev="sda1" ino=17667 res=1 18:19:41 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xe0\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0xfffffffffffffffd) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f00000002c0)={{0x2, @addr=0x58}, 0x8, 0x1, 0xfffffffffffffff8}) r4 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x10, &(0x7f0000000480)={&(0x7f0000000380)=""/243, 0xf3, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r5, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x40, @dev={0xfe, 0x80, [], 0xf}, 0x7}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r6, 0x4) 18:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8000001a, 0x0, 0x0) 18:19:41 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r1) close(r0) 18:19:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f0000002f00)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\xff\xff\xff\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4P),\xe7\xc2\xe4hu\x8f\xa0\x99*b\xb5\xfd\x9d\xd0K]y\xf6\x10\f\xe2f\xe6\xca\xa9\xceJ?\v\xaf\xd3}]z\xeeI\xd8\x82\x0e\xb2@\x97z\xb9\xb7]n\xbfG\xa6\xedu^\xabd[\x05\x0f\x8aW\x06\xde\xea%\x8c\xed\x1b N\x10\x90\xb5A8\x91\x1f\x06T', 0x5) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/129, 0x81}], 0x4, &(0x7f0000003000)=""/180, 0xb4}, 0x6}, {{&(0x7f0000000580)=@nfc_llcp, 0xff71, &(0x7f0000001800)=[{&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000740)=""/188, 0xbc}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001840)=""/159, 0xffffffffffffffca}, 0x10000}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/135, 0x87}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/150, 0x96}, {&(0x7f0000002b40)=""/48, 0x30}, {&(0x7f0000002b80)=""/227, 0xffffff1a}], 0x6, &(0x7f0000002d00)=""/183, 0xb7}, 0x4}], 0x3, 0x22, &(0x7f0000002e80)={0x0, 0x1c9c380}) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002ec0)='/dev/dsp\x00', 0x8002, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000002fc0)=[0xfffffffffffffff8, 0xfffffffffffff800]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x8, 0x98, 0xfffffffffffffffe, 'queue1\x00', 0x10001}) r4 = dup2(r1, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x20, 0x0, @tick, {}, {0x91}, @connect}], 0x30) fsync(r4) 18:19:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) prctl$PR_SET_TSC(0x1a, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000200)=0x5) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) fstat(0xffffffffffffffff, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x6) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x4, 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x101, 0x2000) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000180)) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:19:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x8000001d, 0x0, 0x0) [ 1711.408872][ T26] audit: type=1804 audit(1555611582.083:4722): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2399/memory.events" dev="sda1" ino=17669 res=1 [ 1711.534621][ T26] audit: type=1804 audit(1555611582.153:4723): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1972/memory.events" dev="sda1" ino=17667 res=1 18:19:42 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101500, 0x500001c) 18:19:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc0000000, 0x0, 0x0) 18:19:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) 18:19:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) [ 1712.381303][ T26] audit: type=1804 audit(1555611583.053:4724): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1973/memory.events" dev="sda1" ino=17672 res=1 18:19:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) [ 1712.515181][ T26] audit: type=1804 audit(1555611583.183:4725): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir974861749/syzkaller.LrC3sw/2400/memory.events" dev="sda1" ino=17675 res=1 18:19:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) 18:19:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x800020c0045009, &(0x7f0000000080)) close(r1) ioctl(r0, 0x1000008912, &(0x7f0000001380)="0adc1f123c123f319bd070") 18:19:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc0000001, 0x0, 0x0) 18:19:43 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00l\x00', 0x20, 0x1, 0x978, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'bond_slave_0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x8e8, [@among={'among\x00', 0x820, {{0xc}}}]}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x9f0) 18:19:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) [ 1713.126292][ T26] audit: type=1804 audit(1555611583.793:4726): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1973/memory.events" dev="sda1" ino=17672 res=1 [ 1713.140467][T12829] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 18:19:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x800020c0045002, &(0x7f0000000080)) close(r1) ioctl(r0, 0x1000008912, &(0x7f0000001380)="0adc1f123c123f319bd070") 18:19:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xebffffff, 0x0, 0x0) 18:19:44 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101600, 0x500001c) 18:19:44 executing program 1: socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,noextend,msize=0x0000000000000003,nodevmap,access=user,version=9p2000.u,aname=systemppp0keyringwlan1,pri\a\x00ort,version=9p2000.u,mmap,cache=none,context=root,fscontext=unconfined_u,rootcontext=sysadm_u,\x00']) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 18:19:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f00000002c0)=""/205, 0xcd}, &(0x7f0000000040), 0x69}, 0x20) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 18:19:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 18:19:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xfcfdffff, 0x0, 0x0) 18:19:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xebffffff, 0x0, 0x0) 18:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) 18:19:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(0x0, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 18:19:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@logdev={'logdev', 0x3d, './file0'}}]}) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) 18:19:45 executing program 0: chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open$cgroup(&(0x7f0000000000)={0x7, 0x70, 0x80, 0x101, 0x9, 0xffffffff, 0x0, 0x10000, 0x4000, 0x4, 0x47, 0x40, 0x1ff, 0x53a2, 0x4, 0x3c80fc6f, 0x0, 0x7f, 0x3ec0, 0x9, 0x1, 0x100000000, 0x101, 0x3, 0x78, 0x7f, 0x7, 0xdb7, 0x7, 0xf759, 0x8, 0xccb, 0xe5, 0xffffffffffff0001, 0x9, 0x3, 0x925f, 0x3b, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40}, 0x4, 0x400, 0x5, 0x7, 0x4, 0x0, 0x5}, r1, 0xe, r1, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000280)=0x553) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000101700, 0x500001c) 18:19:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:45 executing program 1 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:19:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0) 18:19:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) [ 1714.763206][T12911] FAULT_INJECTION: forcing a failure. [ 1714.763206][T12911] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.844656][T12911] CPU: 1 PID: 12911 Comm: syz-executor.1 Not tainted 5.1.0-rc5+ #73 [ 1714.852672][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.862740][T12911] Call Trace: [ 1714.866053][T12911] dump_stack+0x172/0x1f0 [ 1714.870422][T12911] should_fail.cold+0xa/0x15 [ 1714.875060][T12911] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1714.880889][T12911] ? ___might_sleep+0x163/0x280 [ 1714.886887][T12911] __should_failslab+0x121/0x190 [ 1714.892863][T12911] should_failslab+0x9/0x14 [ 1714.898551][T12911] __kmalloc+0x2dc/0x740 [ 1714.902842][T12911] ? tracepoint_probe_unregister+0x1a5/0x670 [ 1714.908821][T12911] tracepoint_probe_unregister+0x1a5/0x670 [ 1714.914631][T12911] ? perf_trace_sched_kthread_stop+0x520/0x520 [ 1714.920785][T12911] trace_event_reg+0x189/0x350 [ 1714.925757][T12911] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1714.932115][T12911] perf_trace_event_unreg.isra.0+0xbb/0x220 [ 1714.938002][T12911] perf_trace_destroy+0xc1/0x100 [ 1714.942991][T12911] ? perf_tp_event_init+0x120/0x120 [ 1714.948180][T12911] tp_perf_event_destroy+0x16/0x20 [ 1714.953331][T12911] _free_event+0x356/0x13b0 [ 1714.957828][T12911] ? ring_buffer_attach+0x650/0x650 [ 1714.963017][T12911] put_event+0x47/0x60 [ 1714.967073][T12911] perf_event_release_kernel+0x693/0xbe0 [ 1714.972706][T12911] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1714.978935][T12911] ? put_event+0x60/0x60 [ 1714.983167][T12911] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1714.989395][T12911] ? perf_event_release_kernel+0xbe0/0xbe0 [ 1714.995707][T12911] perf_release+0x37/0x50 [ 1715.000034][T12911] __fput+0x2e5/0x8d0 [ 1715.004022][T12911] ____fput+0x16/0x20 [ 1715.007990][T12911] task_work_run+0x14a/0x1c0 [ 1715.012612][T12911] exit_to_usermode_loop+0x273/0x2c0 [ 1715.017903][T12911] do_syscall_64+0x52d/0x610 [ 1715.022500][T12911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1715.028411][T12911] RIP: 0033:0x458c29 [ 1715.032308][T12911] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1715.052733][T12911] RSP: 002b:00007f68a699dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1715.061169][T12911] RAX: 0000000000000000 RBX: 00007f68a699dc90 RCX: 0000000000458c29 [ 1715.069167][T12911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1715.077142][T12911] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1715.085121][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f68a699e6d4 18:19:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x53, 0x0, &(0x7f0000000000)) close(r2) close(r1) 18:19:45 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) [ 1715.093080][T12911] R13: 00000000004f6d12 R14: 00000000004d0038 R15: 0000000000000005 [ 1715.123373][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1715.123389][ T26] audit: type=1804 audit(1555611585.793:4732): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir593099718/syzkaller.I1GCFP/1975/memory.events" dev="sda1" ino=17664 res=1 18:19:45 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) futex(&(0x7f0000000040)=0x2, 0x8c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x2) [ 1715.317478][T12909] kasan: CONFIG_KASAN_INLINE enabled [ 1715.325432][T12909] kasan: GPF could be caused by NULL-ptr deref or user memory access