Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts.
2019/10/08 10:59:20 fuzzer started
2019/10/08 10:59:21 dialing manager at 10.128.0.105:33861
2019/10/08 10:59:21 syscalls: 2523
2019/10/08 10:59:21 code coverage: enabled
2019/10/08 10:59:21 comparison tracing: enabled
2019/10/08 10:59:21 extra coverage: extra coverage is not supported by the kernel
2019/10/08 10:59:21 setuid sandbox: enabled
2019/10/08 10:59:21 namespace sandbox: enabled
2019/10/08 10:59:21 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/08 10:59:21 fault injection: enabled
2019/10/08 10:59:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/08 10:59:21 net packet injection: enabled
2019/10/08 10:59:21 net device setup: enabled
2019/10/08 10:59:21 concurrency sanitizer: enabled
10:59:24 executing program 0:
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000004c0)=@isdn={0x22, 0x8, 0x0, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="ae14d3ad26e94ac5da9671d9015f5876510f11e3", 0x14}], 0x1}, 0x0)

syzkaller login: [   47.796422][ T7239] IPVS: ftp: loaded support on port[0] = 21
10:59:24 executing program 1:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

[   47.879938][ T7239] chnl_net:caif_netlink_parms(): no params data found
[   47.925182][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.942698][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.960502][ T7239] device bridge_slave_0 entered promiscuous mode
[   47.990178][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.997290][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.005623][ T7239] device bridge_slave_1 entered promiscuous mode
[   48.060960][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.081077][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.119653][ T7239] team0: Port device team_slave_0 added
[   48.133009][ T7242] IPVS: ftp: loaded support on port[0] = 21
[   48.141323][ T7239] team0: Port device team_slave_1 added
10:59:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f00005e0000), &(0x7f0000000000)=0x2c5)

[   48.242607][ T7239] device hsr_slave_0 entered promiscuous mode
[   48.310421][ T7239] device hsr_slave_1 entered promiscuous mode
[   48.355543][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.362801][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.370198][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.377241][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state
10:59:25 executing program 3:
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
writev(r0, &(0x7f00000000c0), 0x20000000000003fa)
sendfile(r0, r0, 0x0, 0x4)

[   48.550464][ T7242] chnl_net:caif_netlink_parms(): no params data found
[   48.574775][ T7245] IPVS: ftp: loaded support on port[0] = 21
[   48.617013][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.654324][ T7239] 8021q: adding VLAN 0 to HW filter on device team0
[   48.672930][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.689442][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.703698][ T7242] device bridge_slave_0 entered promiscuous mode
[   48.720779][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.727842][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.751294][ T7242] device bridge_slave_1 entered promiscuous mode
[   48.769891][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   48.778412][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.800051][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.812153][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   48.865184][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   48.889986][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.897109][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.905473][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   48.914062][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.921146][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.943703][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.967499][ T7248] IPVS: ftp: loaded support on port[0] = 21
[   48.975534][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.999416][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.008792][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
10:59:25 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="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", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

[   49.064538][ T7242] team0: Port device team_slave_0 added
[   49.070726][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.081315][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.093092][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.118467][ T7242] team0: Port device team_slave_1 added
[   49.125600][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.150381][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.158925][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.180232][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.188617][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.210071][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.238943][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   49.333743][ T7242] device hsr_slave_0 entered promiscuous mode
[   49.389753][ T7242] device hsr_slave_1 entered promiscuous mode
10:59:26 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   49.439426][ T7242] debugfs: Directory 'hsr0' with parent '/' already present!
[   49.452319][ T7245] chnl_net:caif_netlink_parms(): no params data found
[   49.492602][ T7252] IPVS: ftp: loaded support on port[0] = 21
[   49.511054][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.563862][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.571126][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.579095][ T7245] device bridge_slave_0 entered promiscuous mode
[   49.617945][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.625735][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.636524][ T7245] device bridge_slave_1 entered promiscuous mode
[   49.655100][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.696573][ T7242] 8021q: adding VLAN 0 to HW filter on device team0
[   49.721384][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   49.732165][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   49.740181][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.762188][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.807681][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.816493][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.838333][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.845524][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.854508][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.863156][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.871619][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.878664][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.886644][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.895857][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
10:59:26 executing program 0:
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000004c0)=@isdn={0x22, 0x8, 0x0, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="ae14d3ad26e94ac5da9671d9015f5876510f11e3", 0x14}], 0x1}, 0x0)

[   49.906175][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.961932][ T7259] IPVS: ftp: loaded support on port[0] = 21
[   49.973943][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   49.986197][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.995239][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
10:59:26 executing program 0:
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000004c0)=@isdn={0x22, 0x8, 0x0, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="ae14d3ad26e94ac5da9671d9015f5876510f11e3", 0x14}], 0x1}, 0x0)

[   50.007654][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.023798][ T7248] chnl_net:caif_netlink_parms(): no params data found
[   50.035199][ T7242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.046338][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:59:26 executing program 0:
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000004c0)=@isdn={0x22, 0x8, 0x0, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="ae14d3ad26e94ac5da9671d9015f5876510f11e3", 0x14}], 0x1}, 0x0)

[   50.075004][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.084132][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.094602][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.166026][ T7245] team0: Port device team_slave_0 added
[   50.183813][ T7245] team0: Port device team_slave_1 added
10:59:26 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e6465780044000200400006003c00010000000000e5000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000144908c96c296109985a93635b93b2e0faae127c3c8ac6f66bb68955cd67938c07347634698f8ce9df008b42f45049180b0533387dafc2e47a4b188d4920a74ce5cb6e4fceb6e4d1037d0da10f3f2a4425"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[   50.210871][ T7252] chnl_net:caif_netlink_parms(): no params data found
[   50.247118][ T7242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.272435][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.286610][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.301434][ T7248] device bridge_slave_0 entered promiscuous mode
[   50.334561][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.341868][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.350186][ T7248] device bridge_slave_1 entered promiscuous mode
[   50.422081][ T7245] device hsr_slave_0 entered promiscuous mode
[   50.459774][ T7245] device hsr_slave_1 entered promiscuous mode
[   50.499437][ T7245] debugfs: Directory 'hsr0' with parent '/' already present!
[   50.537818][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.548731][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.558220][ T7252] device bridge_slave_0 entered promiscuous mode
[   50.595970][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.608044][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.616443][    C0] hrtimer: interrupt took 43816 ns
[   50.636762][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state
10:59:27 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e6465780044000200400006003c00010000000000e5000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000144908c96c296109985a93635b93b2e0faae127c3c8ac6f66bb68955cd67938c07347634698f8ce9df008b42f45049180b0533387dafc2e47a4b188d4920a74ce5cb6e4fceb6e4d1037d0da10f3f2a4425"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[   50.645208][ T7252] device bridge_slave_1 entered promiscuous mode
[   50.685503][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.780286][ T7286] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop1
[   50.789048][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.811818][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0
10:59:27 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e6465780044000200400006003c00010000000000e5000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000144908c96c296109985a93635b93b2e0faae127c3c8ac6f66bb68955cd67938c07347634698f8ce9df008b42f45049180b0533387dafc2e47a4b188d4920a74ce5cb6e4fceb6e4d1037d0da10f3f2a4425"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[   50.871412][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.891308][ T7286] BTRFS error (device loop1): superblock checksum mismatch
[   50.893015][ T7245] 8021q: adding VLAN 0 to HW filter on device team0
[   50.907508][ T7248] team0: Port device team_slave_0 added
[   50.931375][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.963621][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.969512][ T7286] BTRFS error (device loop1): open_ctree failed
[   51.006553][ T7259] chnl_net:caif_netlink_parms(): no params data found
[   51.025396][ T7248] team0: Port device team_slave_1 added
[   51.039443][ T7245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   51.050058][ T7245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.067483][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.076812][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.104741][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.111860][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.127047][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.135869][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.139732][ T7298] BTRFS error (device loop1): superblock checksum mismatch
[   51.153844][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.160928][ T7247] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.174878][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.183944][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.193104][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.202254][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.211243][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.219551][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.230251][ T7252] team0: Port device team_slave_0 added
[   51.258784][ T7252] team0: Port device team_slave_1 added
[   51.264334][ T7298] BTRFS error (device loop1): open_ctree failed
[   51.265244][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.279253][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.291532][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:59:27 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000c0001007463696e6465780044000200400006003c00010000000000e5000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000144908c96c296109985a93635b93b2e0faae127c3c8ac6f66bb68955cd67938c07347634698f8ce9df008b42f45049180b0533387dafc2e47a4b188d4920a74ce5cb6e4fceb6e4d1037d0da10f3f2a4425"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[   51.347787][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.354944][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.363535][ T7259] device bridge_slave_0 entered promiscuous mode
[   51.377806][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0
10:59:28 executing program 1:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

[   51.406552][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.418105][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.461845][ T7259] device bridge_slave_1 entered promiscuous mode
[   51.522360][ T7248] device hsr_slave_0 entered promiscuous mode
[   51.557711][ T7248] device hsr_slave_1 entered promiscuous mode
[   51.620518][ T7248] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.674036][ T7252] device hsr_slave_0 entered promiscuous mode
[   51.686912][ T7310] BTRFS error (device loop1): superblock checksum mismatch
[   51.719788][ T7252] device hsr_slave_1 entered promiscuous mode
[   51.730153][ T7310] BTRFS error (device loop1): open_ctree failed
[   51.769474][ T7252] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.788928][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.836730][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.940075][ T7259] team0: Port device team_slave_0 added
[   51.995591][ T7259] team0: Port device team_slave_1 added
10:59:28 executing program 0:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

[   52.085426][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.106266][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.144745][ T7252] 8021q: adding VLAN 0 to HW filter on device team0
[   52.182584][ T7259] device hsr_slave_0 entered promiscuous mode
[   52.229807][ T7259] device hsr_slave_1 entered promiscuous mode
[   52.289984][ T7259] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.315636][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.320099][ T7327] BTRFS error (device loop0): superblock checksum mismatch
[   52.327552][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.341616][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[   52.355855][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.363813][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.372247][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.380976][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.389507][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.390505][ T7327] BTRFS error (device loop0): open_ctree failed
[   52.396536][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.397478][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.419698][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.428106][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.435206][ T7247] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.448027][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.486239][ T7248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.498038][ T7248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.533819][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.543041][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.556996][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.564224][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.577075][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.586538][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.605820][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.614605][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.621669][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.629664][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.638719][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.647595][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.656323][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.665381][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.674527][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.683200][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.692298][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.701083][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.709895][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.718346][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.727241][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.735739][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.744488][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.752809][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.761384][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.769782][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.778061][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.786295][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.798563][ T7252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.818258][ T7252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.836374][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.846460][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.863070][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.872511][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.881215][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.890088][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.908274][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.940702][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.975399][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.984038][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.011113][ T7259] 8021q: adding VLAN 0 to HW filter on device team0
[   53.026359][ T7343] syz-executor.3 (7343): /proc/7341/oom_adj is deprecated, please use /proc/7341/oom_score_adj instead.
[   53.051706][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
10:59:29 executing program 3:
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
writev(r0, &(0x7f00000000c0), 0x20000000000003fa)
sendfile(r0, r0, 0x0, 0x4)

[   53.087631][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.108580][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.115702][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.144554][   T25] kauditd_printk_skb: 3 callbacks suppressed
[   53.144578][   T25] audit: type=1800 audit(1570532369.763:31): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16530 res=0
[   53.159888][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.196328][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.207368][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.210458][   T25] audit: type=1804 audit(1570532369.763:32): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/0/file0" dev="sda1" ino=16530 res=1
[   53.222230][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.246757][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.255647][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.271479][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.290725][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.299280][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.320819][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.334005][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.354727][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.364157][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.381504][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.390097][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.398483][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.409154][ T7259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.441651][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.517527][   T25] audit: type=1800 audit(1570532370.133:33): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16530 res=0
[   53.544394][   T25] audit: type=1804 audit(1570532370.163:34): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/0/file0" dev="sda1" ino=16530 res=1
10:59:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f00005e0000), &(0x7f0000000000)=0x2c5)

[   53.725049][ T7360] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[   53.953949][ T7372] blk_update_request: I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   53.965361][ T7372] Buffer I/O error on dev loop0, logical block 0, lost async page write
[   53.973819][ T7372] blk_update_request: I/O error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   53.985006][ T7372] Buffer I/O error on dev loop0, logical block 1, lost async page write
[   53.993475][ T7372] blk_update_request: I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.004686][ T7372] Buffer I/O error on dev loop0, logical block 2, lost async page write
[   54.013145][ T7372] blk_update_request: I/O error, dev loop0, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.024376][ T7372] Buffer I/O error on dev loop0, logical block 3, lost async page write
[   54.032859][ T7372] blk_update_request: I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.044092][ T7372] Buffer I/O error on dev loop0, logical block 4, lost async page write
[   54.052584][ T7372] blk_update_request: I/O error, dev loop0, sector 20 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.063814][ T7372] Buffer I/O error on dev loop0, logical block 5, lost async page write
[   54.072285][ T7372] blk_update_request: I/O error, dev loop0, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.083519][ T7372] Buffer I/O error on dev loop0, logical block 6, lost async page write
[   54.091987][ T7372] blk_update_request: I/O error, dev loop0, sector 28 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.103229][ T7372] Buffer I/O error on dev loop0, logical block 7, lost async page write
[   54.111714][ T7372] blk_update_request: I/O error, dev loop0, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[   54.122976][ T7372] Buffer I/O error on dev loop0, logical block 8, lost async page write
[   54.131494][ T7372] Buffer I/O error on dev loop0, logical block 9, lost async page write
10:59:30 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:30 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="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", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

10:59:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f00005e0000), &(0x7f0000000000)=0x2c5)

10:59:30 executing program 1:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

10:59:30 executing program 0:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

10:59:30 executing program 3:
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
writev(r0, &(0x7f00000000c0), 0x20000000000003fa)
sendfile(r0, r0, 0x0, 0x4)

10:59:31 executing program 3:
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
writev(r0, &(0x7f00000000c0), 0x20000000000003fa)
sendfile(r0, r0, 0x0, 0x4)

[   54.412322][   T25] audit: type=1800 audit(1570532371.033:35): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16549 res=0
10:59:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f00005e0000), &(0x7f0000000000)=0x2c5)

[   54.549432][   T25] audit: type=1804 audit(1570532371.063:36): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/1/file0" dev="sda1" ino=16549 res=1
10:59:31 executing program 0:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

10:59:31 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   55.149720][ T7386] BTRFS error (device loop1): superblock checksum mismatch
10:59:31 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:31 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="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", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

[   55.309428][ T7386] BTRFS error (device loop1): open_ctree failed
[   55.461880][   T25] audit: type=1800 audit(1570532372.083:37): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16557 res=0
10:59:32 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:32 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:32 executing program 1:
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000501004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x9, 0x0)

[   55.567845][   T25] audit: type=1804 audit(1570532372.133:38): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/2/file0" dev="sda1" ino=16557 res=1
[   56.233847][ T7428] BTRFS error (device loop1): superblock checksum mismatch
10:59:32 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:32 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:33 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   56.321227][ T7428] BTRFS error (device loop1): open_ctree failed
10:59:33 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576b31e5fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

[   56.394561][ T7414] syz-executor.4 (7414) used greatest stack depth: 9648 bytes left
[   56.623100][   T25] audit: type=1800 audit(1570532373.243:39): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16567 res=0
10:59:33 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   56.739553][   T25] audit: type=1804 audit(1570532373.273:40): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/3/file0" dev="sda1" ino=16567 res=1
10:59:33 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:33 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:33 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:33 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:34 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   59.133161][ T7531] print_req_error: 283 callbacks suppressed
[   59.133222][ T7531] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
10:59:35 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:35 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:36 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   60.171983][ T7569] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
10:59:37 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="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", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

10:59:37 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:37 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:38 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   61.418837][   T25] audit: type=1800 audit(1570532378.033:41): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16578 res=0
[   61.482683][   T25] audit: type=1804 audit(1570532378.063:42): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir326399848/syzkaller.Nqo1Wo/10/file0" dev="sda1" ino=16578 res=1
10:59:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576b31e5fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

10:59:38 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

10:59:38 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x2, 0x0, {0x0, 0x2}})
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x7, {0x7, 0x8, 0x81, 0x4, 0x0, 0xd9}, 0x8000, 0x1}, 0x80)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000340)={0x1f, 0x2b3e, 0x6, @remote, 'veth0_to_hsr\x00'})
write$9p(r1, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9ca8bec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b60fca627576b31e5fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c46a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1f4, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xc2800, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'ip6_vti0\x00', 0x4005})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
r5 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x5, 0x80, 0x40, 0x0, 0xae, 0x10001, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x2, 0x7, 0x8, 0x3, 0x1, 0xfff8}, 0x0, 0x3ff, r5, 0x8)
sendfile(r1, r2, 0x0, 0x10000)

[   61.798658][   T25] audit: type=1800 audit(1570532378.413:43): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16534 res=0
10:59:38 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6af9, 0x0, 0x400, 0x1, 0x0, 0x1, 0x10001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x40000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
name_to_handle_at(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_procfs(0x0, &(0x7f0000000000)='io\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffffff0800000000000000", 0x24)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200", 0x12)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2800000043000000020000002b07df2fd0846bc0964f4ffde3d917e302000000"], 0x28}}], 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7f, 0x4)
write(0xffffffffffffffff, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071008000100ffffff", 0x1b)

[   61.873517][   T25] audit: type=1804 audit(1570532378.453:44): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir848179651/syzkaller.xkAdN8/10/file0" dev="sda1" ino=16534 res=1
[   62.201006][ T7205] ==================================================================
[   62.209223][ T7205] BUG: KCSAN: data-race in generic_permission / kernfs_refresh_inode
[   62.217280][ T7205] 
[   62.219610][ T7205] write to 0xffff888129ed6490 of 2 bytes by task 7206 on cpu 0:
[   62.227262][ T7205]  kernfs_refresh_inode+0x44/0x180
[   62.228042][   T25] audit: type=1800 audit(1570532378.843:45): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16580 res=0
[   62.232367][ T7205]  kernfs_iop_permission+0x66/0xa0
[   62.232384][ T7205]  inode_permission+0x241/0x3c0
[   62.232395][ T7205]  link_path_walk.part.0+0x622/0xa90
[   62.232406][ T7205]  path_lookupat.isra.0+0x77/0x5a0
[   62.232418][ T7205]  filename_lookup+0x145/0x2d0
[   62.232429][ T7205]  user_path_at_empty+0x4c/0x70
[   62.232441][ T7205]  do_readlinkat+0x84/0x220
[   62.232468][ T7205]  __x64_sys_readlink+0x51/0x70
[   62.291997][ T7205]  do_syscall_64+0xcf/0x2f0
[   62.296556][ T7205]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.302551][ T7205] 
[   62.304883][ T7205] read to 0xffff888129ed6490 of 2 bytes by task 7205 on cpu 1:
[   62.312430][ T7205]  generic_permission+0x36/0x3d0
[   62.317368][ T7205]  kernfs_iop_permission+0x7d/0xa0
[   62.322480][ T7205]  inode_permission+0x241/0x3c0
[   62.327322][ T7205]  link_path_walk.part.0+0x622/0xa90
[   62.332593][ T7205]  path_lookupat.isra.0+0x77/0x5a0
[   62.337696][ T7205]  filename_lookup+0x145/0x2d0
[   62.342453][ T7205]  user_path_at_empty+0x4c/0x70
[   62.347299][ T7205]  do_readlinkat+0x84/0x220
[   62.351807][ T7205]  __x64_sys_readlink+0x51/0x70
[   62.356654][ T7205]  do_syscall_64+0xcf/0x2f0
[   62.361160][ T7205]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.367032][ T7205] 
[   62.369451][ T7205] Reported by Kernel Concurrency Sanitizer on:
[   62.375597][ T7205] CPU: 1 PID: 7205 Comm: udevd Not tainted 5.3.0+ #0
[   62.382264][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.392315][ T7205] ==================================================================
[   62.400371][ T7205] Kernel panic - not syncing: panic_on_warn set ...
[   62.406951][ T7205] CPU: 1 PID: 7205 Comm: udevd Not tainted 5.3.0+ #0
[   62.413617][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.423662][ T7205] Call Trace:
[   62.426955][ T7205]  dump_stack+0xf5/0x159
[   62.431199][ T7205]  panic+0x209/0x639
[   62.435093][ T7205]  ? vprintk_func+0x8d/0x140
[   62.439687][ T7205]  kcsan_report.cold+0x57/0xeb
[   62.444472][ T7205]  __kcsan_setup_watchpoint+0x342/0x500
[   62.444491][ T7205]  __tsan_read2+0x2c/0x30
[   62.444514][ T7205]  generic_permission+0x36/0x3d0
[   62.444535][ T7205]  ? kernfs_refresh_inode+0x14e/0x180
[   62.444554][ T7205]  kernfs_iop_permission+0x7d/0xa0
[   62.444572][ T7205]  ? kernfs_iop_getattr+0x90/0x90
[   62.444588][ T7205]  inode_permission+0x241/0x3c0
[   62.444606][ T7205]  link_path_walk.part.0+0x622/0xa90
[   62.444630][ T7205]  path_lookupat.isra.0+0x77/0x5a0
[   62.444652][ T7205]  filename_lookup+0x145/0x2d0
[   62.444672][ T7205]  ? __tsan_write8+0x32/0x40
[   62.444692][ T7205]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   62.444706][ T7205]  ? strncpy_from_user+0x219/0x2b0
[   62.444722][ T7205]  ? __tsan_read8+0x2c/0x30
[   62.444737][ T7205]  ? getname_flags+0x1a4/0x380
[   62.444754][ T7205]  user_path_at_empty+0x4c/0x70
[   62.444771][ T7205]  do_readlinkat+0x84/0x220
[   62.444794][ T7205]  __x64_sys_readlink+0x51/0x70
[   62.444813][ T7205]  do_syscall_64+0xcf/0x2f0
[   62.444835][ T7205]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.444848][ T7205] RIP: 0033:0x7f249f5ac577
[   62.444868][ T7205] Code: f0 ff ff 77 02 f3 c3 48 8b 15 bd 38 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 38 2b 00 31 d2 48 29 c2 64
[   62.444877][ T7205] RSP: 002b:00007ffe541b1628 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[   62.444893][ T7205] RAX: ffffffffffffffda RBX: 0000000000a7a250 RCX: 00007f249f5ac577
[   62.444902][ T7205] RDX: 0000000000000400 RSI: 00007ffe541b1630 RDI: 00007ffe541b1b10
[   62.444912][ T7205] RBP: 00007ffe541b2350 R08: 00007ffe541b2350 R09: 00007f249f600dc0
[   62.444921][ T7205] R10: 7665642f7379732f R11: 0000000000000246 R12: 00007ffe541b1b10
[   62.444930][ T7205] R13: 0000000000000400 R14: 0000000000a7a250 R15: 0000000000a7fe10
[   62.446331][ T7205] Kernel Offset: disabled
[   62.623451][ T7205] Rebooting in 86400 seconds..