110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:00:57 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:00:57 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

[ 2215.293996][ T7452] fuse: Bad value for 'fd'
20:00:58 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000008004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:00:58 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000007004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:00:58 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:00:58 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(0xffffffffffffffff, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:00:58 executing program 4:
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/169)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

[ 2215.636535][ T7464] fuse: Bad value for 'fd'
20:00:58 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000009004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:00:58 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:00:58 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000000a004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:00:58 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:00:58 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:00:58 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:00:58 executing program 4:
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/169)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

20:00:59 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

20:00:59 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000000c004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2216.747620][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:00:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:00:59 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2216.837027][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2216.876739][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
20:00:59 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:00:59 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

[ 2217.104798][ T7513] fuse: Bad value for 'fd'
20:00:59 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

20:00:59 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000010004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:00:59 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:00 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

[ 2217.522246][ T7529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:01:00 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
syz_open_dev$media(0x0, 0x0, 0x90040)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[ 2217.569469][ T7529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2217.589179][ T7529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
20:01:00 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000023004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
syz_open_dev$media(0x0, 0x0, 0x90040)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

20:01:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:00 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2218.077191][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:01:00 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000de000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:00 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000048004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2218.216579][ T7555] fuse: Bad value for 'fd'
[ 2218.227843][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
20:01:00 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

[ 2218.283217][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
20:01:01 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(0x0, 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2218.456979][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2218.475105][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2218.484209][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2218.516463][ T7563] fuse: Bad value for 'fd'
20:01:01 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000004c004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:01 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(0x0, 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(0x0, 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:01 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000068004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:01 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(0x0, 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:02 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(0x0, 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:02 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:02 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000006c004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:02 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:02 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00')
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[ 2219.923104][   T27] audit: type=1804 audit(1578859262.543:322): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir587634137/syzkaller.l4mcFa/1179/bus" dev="sda1" ino=16542 res=1
20:01:02 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:02 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000074004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:02 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2220.146428][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2220.277036][ T7630] fuse: Bad value for 'fd'
[ 2220.285265][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2220.343123][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
20:01:03 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:03 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000007a004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2220.615611][   T27] audit: type=1804 audit(1578859263.233:323): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir587634137/syzkaller.l4mcFa/1180/bus" dev="sda1" ino=16917 res=1
20:01:03 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:03 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:03 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:03 executing program 0:
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2221.069438][   T27] audit: type=1804 audit(1578859263.683:324): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir909731032/syzkaller.5atsll/1339/bus" dev="sda1" ino=16680 res=1
20:01:03 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000de004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:03 executing program 4:
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2221.152331][   T27] audit: type=1804 audit(1578859263.773:325): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir587634137/syzkaller.l4mcFa/1181/bus" dev="sda1" ino=16679 res=1
20:01:03 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:03 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

[ 2221.393567][ T7669] fuse: Bad value for 'fd'
[ 2221.480877][ T7673] fuse: Bad value for 'fd'
20:01:04 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000034d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:04 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

20:01:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:04 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:04 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000054d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0xfd69403b80c3e918, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040800)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[ 2221.943943][ T7689] fuse: Bad value for 'fd'
[ 2221.957634][ T7691] fuse: Bad value for 'fd'
[ 2222.068105][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2222.110498][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2222.144960][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
20:01:04 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000064d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:05 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000074d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:05 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000094d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:05 executing program 3:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:05 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x200)
semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(0x0, 0x0, 0xa9b01d486ca589ab)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_pts(r2, 0x40000)
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r3, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpgrp(0x0)
r5 = gettid()
rt_tgsigqueueinfo(r4, r5, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r9, 0x0, 0x0)
fallocate(r9, 0x0, 0x0, 0x2000002)
fallocate(r8, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9, 0xfffffffffffffffc, 0x8, 0x20})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r10, r10, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r10, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r11 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:05 executing program 5:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000006000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:06 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:06 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0x338af002}, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x220, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x5, 0x2e3)
semget(0x2, 0x0, 0x0)
r2 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220)
semop(r2, 0x0, 0xa9b01d486ca589ab)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_pts(r3, 0x40000)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = getpgrp(0x0)
r6 = gettid()
rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x100000000014b5, 0x8800)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
fallocate(r10, 0x0, 0x0, 0x2000002)
fallocate(r9, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00')
sendfile(r11, r11, 0x0, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00')
r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800)
ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)

20:01:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r0, &(0x7f00000017c0), 0x73, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
r2 = getpgid(r1)
r3 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, 0x0)
setresuid(0x0, r4, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f00000002c0))
r6 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, 0x0)
setresuid(0x0, r7, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000400)=0xc)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r9, &(0x7f00000017c0), 0x73, 0x0)
ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000001780)=<r10=>0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000018c0)=0xe8)
getresgid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)=<r12=>0x0)
r13 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002e80), &(0x7f0000002ec0)=0x10, 0x80800)
r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r14, &(0x7f00000017c0), 0x73, 0x0)
r15 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r15, &(0x7f00000017c0), 0x73, 0x0)
r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r17 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r17, &(0x7f00000017c0), 0x73, 0x0)
r18 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r18, 0x0, 0x0)
r19 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r19, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000002f80)=[{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000040)="5b69c377fa8fd5618f58feaccec87b51b0a4e3d4", 0x14}, {&(0x7f0000000480)="d676f9454199f2351db8af7ef702a725e5a1ffd9a65676710a79ddc5ab70072ce2c287f5cd744a783675610d973979199dab77b2e54a1b0fa1caa529a312a438ed7bcf8b7c9f54b40f195fbd21d45565bd7b49ef0abb1fbb7e658f762f203cda3c9f18d0713884e6ccdfaf7e905bc5b33c8910eb054a04792a4cc3a309456cb14b0d7873f3ed33471f2129434172fc1b409a6251ce70ed419335721a554c4985df36aef68d9f6e80545a400dd31177348f80327be08302ab05bed0250978c4", 0xbf}, {&(0x7f0000000540)="113cd48298805c39d69b732fc7ae1f1b7936619551273fc914356cea7a92a646faa67b8b9f40bcc2cbdd54407a139e3f66982af6858cbe1e20c49ef964b594fb7f66928b97578d7a725e6575fe6efa2b6bb04c42a2d113aacfa0c52f8212fa989f47f1f23c2c2062825909dd100ed0db351883ab1a36689cc99a48f62b2151a0891bfcdc5c067af0f4356e61081fe5d72cfdb610d5d54f2a545f55d2a4786850aae51eb25caba45383e5fd47d4a2", 0xae}, {&(0x7f0000000600)="6b01d8d4a0f3d2646efbfa3c022f58dd55c6dafbacbc4609af769e5733a632f9dfd94ca1de9695148b029516503341c4cdd5daa454ee7d798b9017e811669ce4df003dc5d4405f2c93d7f2c2ced06e771571a3b1ad5cdba757913cc9c935f34d4acc6889b2d3b6d76f47f93fff12b369e452b902388d96df733a9d1f5d18de230f2b974725300171fac6ec1d3fcc05559d5c360b8dd8ddc4b2ea02bed2537134f5d896f6391a5cf32c30310c394d122a519eff4ff531108b79231a81b3484a56187765d188be97ae10c5cec1c4284c8f054bcb482e92d25f4095d7cc8cb0a99e36e9c558aeb71fd3c8686e20df96de1c6e97a945f28dfea84c62fdf789196729503b9524672482182e550473b6656bf8eae04b500a1554e0fca77513d9ada70bc2a0e1e99c776170acc21ad644ae75be767f2e01b1f7f652355f57fad4cb7d31cf88f59522ba7df4a9abccf224b07e6c5618852491b4efddbcef9ca5fe57e0597d60751cdcf91f7fb09dfeed14d7ad664137ffafa8d4fcf918e244148099740538543ffa966effb134bf8423fe93c6d5b1ae9a179b80700f440b3d20acbffe8135215fe1104ca903cd2aaf395b8164ad087770175273f1f8675cf8df2b54c7498be7f0268ebf4546f8639eac27f943f0d1a316a68d4a8975035040e25f038ee4b9fbd158074cb297fe3af98d6188301031c2811ce6292a7d393e66dc1b0b018f69b0397b599d5d9f6d7ce40ff121b9af1a4377c245c9a6dc220b661244919a847c96fa82b9a6deef28f3d396657937c3079ffce8648c6b96de0dcb3abc1bdb727586550350db4c55a80704d0632475625082e5a03a753d62f2f0806fd627cdea6e2eed251764185ed9b72b9fd55635351f575b21d82302cef54ff4329446d18d3f8dd9dd463ee887fbaef89448c25e41db12f894e814e78b414ca895899b77a6d5ee736e57faac04e637cd0bf11a3714f2d8d30c3decf3019509f4796e4ecfaf7a700023ea084a6040619cf7f2debeab9b45ea28b3259eb9819583fbc5051d521b68ea3cd68ebb843cef6d80ae65582c41f0075e31e510648100f8cbe0d2bc25e8c7b8bb37421c56ae6a4aa02a2e36532d68ff2fac6a29d6c388fd98583c77d12680140080dd78b7a2f1cd2b3b90219fd048df28148b061f8400bf5f470e186daccdf7ab9f836034ff4d2eabd09a38490a1ecc47914e8498b7a5ff8deaca4ec69ee5a64cc4bc8e6bb8f66337d44220b8caba7ef73b6c4515064ecb054c7d62f8d60141f8993993af90102638e00905480c6e8f8ad53c901ee753a8cd5fc5f32dcad0a71b4e660990370e3ecd460707cdbe5a13052247d869f383ddcc63d174b47467f5af065c6ba49e93f708511cb410e67920a9f7e701634284751d9167e4f600db408097b3d6d27805b8818e8cdbce00b68086bd479d009079101a3fade78e4da0d118aadbe8de8f313a534d4580c59c59df0a2e293a84b3a64a75f5f177c23a1d8e8deef1b0213a613524919b2c48753d26a24a0a527b07e2d32c2ec975da9ba1a0e675c62205597d8d20e8771f492f2ee9ded4c9009a73662949b6d22aa1f9439926e5eeeef2149cb5f0afa379680916a7eb166b99b1771f09a7c96fc69d4ec43c389e1a5b6e08d9e5307f84406a97d3e9a58505d071bd5b4ae254bc7c7ace6171df6621923926eb230bf2d52844afb071e1918bc9fb80b77d15f514f176fcab802a6a3ba5b1201f22b2239807940bcf89cdd2092b61f493c68b4f23aaf49ec05766e7df6ffd113b18bedfefa9bf08f86f29957f3e171f219b421c0632b0bd7424d8816a4b83385e85013577c2d96720ad0f059edc7de883aaa9a11cf4fa369d7cca1379897ae54f9d3c54b39d1307244642b28cab32b7bd5cfa2aafed48b16079fd30068e8e6b7562829287f5b6caa2ffd2cb862ba40652496ef3a49c0811e7e92120f020af05bd065477ec25570af97246900fc5b17b12340d2c2775a0e81e1627c88f223ba2444a4438ea0f96e52eec51c4a539df6ec8392c3e98f1ed378f7e8828e63ad0beec061b7d8c0586989aa9032eeab949de25790ed6409bc62955fd369e1ff781f1e4ee525715cdbc307ba3bb97af50ac00ec246f2f8590dd954cc8230765b8bb711acca695546bb6622e4a2ca378fd5650ba097884d31c7390b014bd8f9e1075265deee24924d4f10bd07a471f5ad33f06152ae9d3aa2c36415cd0b36c70437b11df8cfcc6562ddb74564673b115ddccff5b6c2ea439aa9dee47a5ddf6895f2438703feb86057deefe32e73745ce071e087c90a230791542569cbaaaadb364bbd641a696b373693861f1f2174a5b75d3554f33fc46eeae6074988661384130ff12b036c6a85970eadd0fc061311b0b2a1e7571790dadc4aa3886146218e7ab925cfce821a45ee1201b206d52522980ad36e835bdeda72efeca32c18ff21cddcee6931529b150a9a5ddd04113a137d06fa1fb8cb7c11eb21c806db342d5f21d5885e51ca4f36fef28b17ff24d28d8d77617bcfd206211cf3918d40db14d35b1234273c6fc4dac17cb230191a5495899902da372e4f63b9ad09d8bfae482c50cf45e29c74d81da3e3706cb2aa2bc97d2370ed76adc1f704bcc9bcbbd2e532113ef0817194c1e4df8b2965d713a5d34a17e45d3b25bf1b9b63a63230a68a191523f7c8d7dc51af2537c6304acbf4889314c3e81ea48b2a76e9fd6debb0691d4d65a23f38c88afe302b685badb39eee373e8bd6eaa617596a1224a570cf168c0aa769f80f8030003638f4d3758e0e8438bb1e5a56adcc64066f30804428e4372d8856b3d3caca913ff38f73d79519eb7cd58e01aa1425027f092c3f3f80aa2c37372b3ec3fc4a2d0b5984a6dbe77e70fd28c21be125b3ce45c26b82f071a3463a895621ed77bad689868d4c2d73c9c077f9048bc829d3ce9734121203730c541da8b751cf5caf9c4f8cb4b40479293d2710ce08398f7d312b8d484ceee310875534352da7e00318a27adfae6f861a7517763a9128f9e203ac08862aa1b00d86daac7dc34b5fc80c5aac10add6a2ac274d05954a7765070462895d933b718308b04422ccb7db19edf83e2f61d526d1c6ea1d5b5902230c15980f0fe2a98d1c34e07ab58fc593167f284a054328e52bf6fdeb2f23023287d1546ba2c07e105944dfe62f28b3c1e4f2f79c8e4fb1c8ce9b8462ed59f3a829b587473d17e9fb193cfb7e00817e0499bc011cda284552a25aded91e825654d71677bed1e5fcfd65e92a22f890ae0b6b91e05784726825a44b410df7e98dbc522dc66639a9551c95879d665235ee533ede68e50126234d86895b07c8601d4b6e9ace07838fe831d84b12bf7f2fc288b66c23b6953761c170adfeb6b004ffbe11100c33f81079745965974bad7700edd4a3806e489f44f645972fdd76a4f18ac371a96484d05c1ecf0ce692f821cf5f82bae7e2f6003d673b003c2131a97a79c21e9ab1eadb34ca58e2f5ea9eccfdd407dba0c164e6f65f50664cc4d7f0a584bea1e2de7c35f9a2fe312af5b4070f63e1ad192aabed8c72a8fc59a3de3ddd3eec6bdcf50a6a001ad60c01269226128e9669d0ff92eadb88d9406b7754eb37956df3de35c24ae75bdeacf248d12e0296551d4f6c825773fb819ea4487d5f4e6a6f71f120e7c89b4c5cc1d397c1dbb4485d821145ea013e7f08126d2b680c4a0365ade7952440a6cd79cdb086468c6c576879f442ae6f6766a2c573e4cb605576470c3e9f3985b91507ab3754e89d7caa949aa6898025943334d16e9bd76590d4bc7be792705c12414a533fe73f3601a127130e6e188959755bf62db49b31b13c80be38303fd4e35dee9034714ed9897d8264897a504a515f3f7069207bc7c6dfd7b3e436fc069703e62b02ba9813506d81195df37c52e8a5da4b36b0402b7c1668443666bdd75f0f8b69408c609608e72ce499fc66df80e1d1c0195c8fa4492e943e68e0d23c77e7bdb9cb21071a8e4e04864de378eb300352dc98217be3609a77b978e23d0077cd306184c3712111236d671e7f70998169d7e124b0f1b573ee0de4c95e6dd3fc57ac03806dace610e3cf66cab1bd69a349284896df189cd1436dd028d638ab5ccd4fdce86c85796bb1183763b30191bb5d6058b92f4e6659ded85b00d032e54229cac237c0d1c5c8dfb31560f8b8a39998daa56af8474c71704be51a81ee00bb21c07eb59ce46dba77a8a474dd7791a663fbed56f4764e979a9d8ea8819ad9cebab4c6cc16978ca5ab8358122cd6310cec9b0608896f89ae23ef2a7dd2d3d861a7a2c0de2ee20f7b0ec150372c66eb4e9a1fb78a7225eb0fcaf5c79684d7ab99e9d4d7aab8298d78510a450fddc7d88bd84e0a8e9321ac9f3cffe764ca19729e2e447dd24c387b47423780d414dfb97310b99a0562f14e6ffd9f3a6c18e970b46765d917c6e714341a47eed46c49396cd5a8178ad558e47b7ee79dac9d0ca4b581f62a9177fd2b333660bd4cab3dac96ee6bf42565bbc3d3db3309584b8bacee082f33f07b0af2bea750f9a0fae171545a4c37edafcd2bd92e8d9aaa85496f6103568b3ba184b393e9ea4037c8e145676de7445370fd39e3f173e733ae6330b6be0f23323f81f2f92c25341828a72f1cf38c2362a38c385152176aea9288e882574fdaed47cf613ac536ed88866c2d5dbdadd0857960933c0bbd099067015a492d2a5428d95baf58923f8f31f6df38fac96a3df8267ff05d4004ee7bfbe45edc620350b516b6721a10565dead11cf21878797b2e1277a481af966de791fc3ec90e7a0a1675f8fa358cd22936c2e87a6286378f35976b2032d858b0cfb698b1112a8f634881ffd7228005257115783cb8085e8e4c0d5b5db5aaefd99f79bba579c75ff0b79686dcf731325188c8e51d06b5e953f4e2308ed0cc8c2a480ededdc9005dcc959a95ee0f9895485c67feecb8895bfd5a544e660701ba131670644e12b74adfa0d8ea68fafc38e79a45401e9e1706c85280a5dbc1c17736144b1df958d7c5c3e43469450814777853a33612815cfcaad3348430d176ba516f7697274f2e2c536d69e71b0ad4a021d70808a7be350a71489f27e349e620d810dcc09de3bf9026449fa3259bd0a8271b422ce13b77780bda24a054a5f94ac420ceb97ea9cb3957aa1011f2a352ffcd9a4e8d3ac8d8b6047c3c5108c53b5478be1e6e8264375dd2475f14d3814d2d588e878f24896f251e066a2e9f14227769ef9a88166afc8620da7488929fed2bc3fe7f332ec633515553b8e4f6da867bae6a623999747c9f011adbf6749928ab608681383ba36117d8a1ee7f015ce73631d5590cb46eaea3ed75577f719c67bef6ce541d0b3c7eab70356cacce342e05813325e22e16cd5af7435d73648322bb1820f5bc6243950fb363a150327385af220d9d029725d7e8384c57f8282acbb6f22a50cbfe9536628fd46a93db1c8ecbe3d03a48cf55cd584cb0da92111f7f2a3900c7fbdd817fd302c9d0d80477b34b82b9a43abf388b4265539985db29ecd6d35a9cfc173c479bced10aa35dfe605c90349ba8c667f32ceeedc7ebb9aaf4ba866f8d47695bce6555f8b74f7223862b994462d66b968ccfea34bcec38bf7a70624afc9ca08ed467b44342291a42365b0355faae0c3d403d77db5cb31a73bcbfa26152ecac2fabfbd498860c395ce1d96b272f42596632d4606aa1c5a191621cb7575d95b4cccd2cfffad0a5251c8c415e707a0996c28c6f6306cc39a3ff767f8e4a1832f8e400114fe973dc54211f5d0326ffc", 0x1000}, {&(0x7f0000000140)="161a54df99f6fdb18ddfb89fc89bb2081d5428c9acdff39d4eedd629eaedeb5e0060368cec38ec745665", 0x2a}, {&(0x7f00000001c0)="8d6d66c8", 0x4}, {&(0x7f0000001600)="6a653d286a53e841eb154a55733b7472325d018ff2baf35efb6bc0c352625a9d7da6751e43e4649e1c43b35589b0928b825ae32ae9223983d3356fb7274758e15bb25afcbdccb63301b3b18fbe4b9f5abdceb52cbbd46eb715411d31e98aa0ee5119231fa3ea121047b466bc82c11c46544dc6d41f3e551e32566e4f354a9b43c557845c8256dc0dfd540d38d8e3333bd698d767a4a57f2a653dbc89b40eada9930e9c408dbfc41ef63f0a142fdf7747363451248504fcda3a8dfca23e1c32bebb3143a6b14e9f083a1b76583013c1bdff8757cdc7fe", 0xd6}], 0x7, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x60, 0x4001}, {&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="45552ebcd3303561b4d44de5af07af7e12d6b52deb0f52cc396aea30e9dfde1226b5eb5c7ab529d6a78b860fb64b4f607e8d3393e625aa600b56201848df8b43114bbd794a95803f3391f585413021174f2b6ed573536d170ea220683ed71a6d223b3755cc11381a6806490bc4e36c66fe08997f23181ecf7fb41496a377d0bdf9682444cec88db01349eb99b160ddcc98d07eb8a73bdabdaa9cfa884477a8a8a61c3c4d265e55d190e7c6eb81f2783c4643fddd5f0a77d301d3a46751ca236dadae57037a144326452616aeb4a0bee8eb", 0xd1}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="85912d803b8a2f88d4a074a66848e8c4c751a197392afe1db117bf2e9014f44a9c16d2522804008d85ce3a08bf310580772a4c683ccf318063eccafb78231e92d219cd08cfdd5bc4a557ea933a8f1629af6750458ba90366fb24fd3b23b56878de7f0a180fa4b6fe0c47cbf1ad4e798b962975e79ff32e1ea280320deb27a7ef99797e495229d20b6ff187e52294c929969d1c5eddb35f658466321142ad93ae8eb1be6470e48d211ba3e75e8086b6e85b0cd0cdce3bef0071f6c535534f7d1fcfa1037669c419aeec8351fecc3cd0268c7c502be21dc84d5e5ec7dc21dbbcc9622465569796", 0xe6}, {&(0x7f0000002cc0)="751d3aaf96783bc47a3588fe8552af49212957c0525b68bd186643be6825529248647564f92f72baf9498a6b49160941608456da6f32d38b21ace891e719134814f87c555f83987333bda37de7f585eb4b881d133e9b93b2ca05b4b79516ba36a8ac1d75e5ca151f2c92a2481940b6d004", 0x71}, {&(0x7f0000002d40)="9e3e59075edb0ee988e3de7271a47fff6b2a0e10874fa489f73d67d4eb5c72598a8c907fd1fef17067bf7bc6493043db6bb134539b152321e49f548756ad26b7dd245d25ee88c7ca68fc76262c25975548582705d89cec1324cfe5ac3668db9d11df6e592963c9d3aa19d74d548ed0c33d414de85fca3212ab3c84770a61ee23e570", 0x82}], 0x5, &(0x7f0000002f00)=[@rights={{0x2c, 0x1, 0x1, [r13, r14, r15, r16, 0xffffffffffffffff, r17, r18]}}, @rights={{0x14, 0x1, 0x1, [r19]}}], 0x48, 0x4002}], 0x2, 0x1)
r20 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r20, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a", 0x18)
r21 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r20, r21, r20}, &(0x7f00000000c0)=""/83, 0x10, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200)

[ 2223.632604][ T7750] fuse: Bad value for 'fd'
20:01:06 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000000a4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2223.872688][ T7764] fuse: Bad value for 'fd'
20:01:06 executing program 5 (fault-call:20 fault-nth:0):
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:06 executing program 4 (fault-call:20 fault-nth:0):
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:06 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:06 executing program 3 (fault-call:20 fault-nth:0):
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x0, 0x40000000, 0x10000101)

20:01:06 executing program 0 (fault-call:2 fault-nth:0):
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:06 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x0, 0x40000000, 0x10000101)

20:01:07 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000000c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:07 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x2, 0x40000000, 0x10000101)

20:01:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0x2, &(0x7f0000000180)=""/169)

20:01:07 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:07 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000950f4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:07 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2225.153952][   T27] audit: type=1800 audit(1578859267.763:326): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16850 res=0
[ 2225.182734][   T27] audit: type=1800 audit(1578859267.773:327): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16850 res=0
20:01:08 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0x3, &(0x7f0000000180)=""/169)

20:01:08 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3, 0x40000000, 0x10000101)

20:01:08 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xb, &(0x7f0000000180)=""/169)

20:01:08 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000020104d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:08 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:08 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x2, 0x40000000, 0x10000101)

[ 2225.909194][   T27] audit: type=1800 audit(1578859268.523:328): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16524 res=0
[ 2225.950107][   T27] audit: type=1800 audit(1578859268.523:329): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16524 res=0
20:01:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xc, &(0x7f0000000180)=""/169)

20:01:08 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

20:01:08 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000001f4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xd, &(0x7f0000000180)=""/169)

20:01:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000180)=""/169)

20:01:09 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4, 0x40000000, 0x10000101)

20:01:09 executing program 4:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000280)={0x20, 0x4, 0x1, 'queue0\x00', 0xfffffffd})
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2226.452080][   T27] audit: type=1800 audit(1578859269.073:330): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16850 res=0
20:01:09 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

[ 2226.541857][   T27] audit: type=1800 audit(1578859269.093:331): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16850 res=0
20:01:09 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x3, 0x40000000, 0x10000101)

20:01:09 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000204d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2226.576452][   T27] audit: type=1800 audit(1578859269.093:332): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16850 res=0
[ 2226.668200][   T27] audit: type=1800 audit(1578859269.283:333): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16528 res=0
20:01:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0x2ab, &(0x7f0000000180)=""/169)

[ 2226.739655][   T27] audit: type=1800 audit(1578859269.303:334): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16528 res=0
20:01:09 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x5, 0x40000000, 0x10000101)

20:01:09 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(0xffffffffffffffff, 0x0, 0x40000000, 0x10000101)

[ 2227.013946][   T27] audit: type=1800 audit(1578859269.623:335): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16543 res=0
20:01:09 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
recvfrom$inet6(r5, &(0x7f0000000280)=""/211, 0xd3, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, 0x1c)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:09 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000010204d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:09 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x804100, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x8001}}, r1, 0x0, r0, 0x0)
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
r4 = accept$unix(r3, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f00000002c0))
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x80040, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000001700)='/dev/dri/card#\x00', 0x6, 0x80000)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001740)=<r10=>0x0)
r11 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, 0x0)
setresuid(0x0, r12, 0x0)
r13 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
sendmsg$netlink(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)={0xf8, 0xf018, 0x2, 0x70bd28, 0x25dfdbff, "", [@nested={0xdd, 0x7c, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r6}, @generic="b31f008d3ec9d7ed5002b35161658a088ca9ae0a4ba3bc6f711cc68c739844ea9478971ede9cd43d9704b4c9d13834ba298ddc286b30bad8dbcb606a09d7e4090854bfedf0938ffb21f40ab7571cdfb030f0ef4b590b97975e456101f615b2d788fd8d612899d02bddd38bbeeb63722127425d2b3befa87063b511c7d9bb81194db4a55bfff9c86e7be7693a9ec4b6df206530b8fb428fbb9ec26164c1508a6660c8b48efdc24ceea7b484512784df3f8c8e3a40373d0998c4caa71eac8963b00cec24ab153a1453ce"]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x3d7}]}, 0xf8}, {&(0x7f0000000440)={0x125c, 0x2b, 0x20, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0x71, 0x0, 0x0, @u64=0xfffffffffffffe01}, @generic="0432a7951e23e77805ee61460b6232ed4092d453ade7746508e94520a1857987732b4049e48d2f05101ecb944abccd37ff6caf37c45bcbb00f79e62c39b57180ca677d44c0c8e0c914ff0929a92e226785b5a8a73ef0135febaf01375872070ae96ced9a65b697d3515ae01aa884", @typed={0x8, 0x40, 0x0, 0x0, @u32=0xffffffff}, @nested={0xb9, 0x0, 0x0, 0x1, [@generic='I', @generic="51705fff32de9096e03b3160e27739f3a2eecb2567bbe7807d048dfd2afb4dbe7a44a0d7d8a35f3d07c25f1a64b5fe62e5e1608d312b44c9e741c5d940d21d600c466cb2622cce2458a458538c2a1f8996cdd18b35b3e8fa4a652c5f70fda8de8ed87c179af45f771f30feebd2d852c2b0c8243c00c36b2744f710596fd1178810af48d75cc60d27dcd2de233bf95ead13650efb2abd6ff79824ee22eab8e51e5ee605f95c56752d3f4e7c53fa0d08686d6b3879"]}, @nested={0x1009, 0x27, 0x0, 0x1, [@typed={0x1004, 0x5f, 0x0, 0x0, @binary="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"}, @generic="e0"]}, @nested={0xfb, 0x4a, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @u32=0x5}, @generic="620b22f30dceb834925b11640d671efd4f7357b4360d59618efaa5165088c9db5c9650931675439c4f518acf371dcd89d07fafce5acc3e472d053f62b88ca4209bf57178a875c2", @typed={0x95, 0x7c, 0x0, 0x0, @binary="f5f8a317ccc80034201d1332a3f18d557ffda7a47df6f62cac615a81b9d9a78e72a950d2bef4d702fc3d11f89633f149f4e4f70065933f667991a8b35293116f553303d34627e83829a2db0e9d7803db771e254438bc7f5d7f411e761efd9e19a75f3df837f1eae1d1741abde33c20b7b43e788f0e721ae7899b10a5ee63890863178a3f18d029bcfc48175cd9449e4966"}, @typed={0x8, 0x20, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r8}]}, @typed={0x4, 0x2d}]}, 0x125c}], 0x2, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}], 0x50, 0x8800}, 0x40)
r14 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r14, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r14, 0x118, 0x0, &(0x7f0000000140)=0x6e, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000100)={0x7, 'tunl0\x00', {}, 0x525})
fcntl$setstatus(r2, 0x4, 0x42000)
r15 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r15, 0x0, 0x0)
getsockname$packet(r15, &(0x7f0000001f40)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001f80)=0x14)
recvfrom$packet(r5, &(0x7f0000001840)=""/160, 0xa0, 0x2, &(0x7f0000001fc0)={0x11, 0x15, r16, 0x1, 0x8, 0x6, @random="11a6b30f694a"}, 0x14)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:09 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x10000101)

20:01:09 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x4, 0x40000000, 0x10000101)

20:01:10 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x6, 0x40000000, 0x10000101)

20:01:10 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000234d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:10 executing program 0:
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xe, 0xffffffffffffffff, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r4 = socket(0x10, 0x8000000803, 0x0)
write(r4, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
r5 = socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r6, @ANYBLOB="00000100b112cfa17538ed285ed2a998640ffbd93a17ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad2567f0d"], 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r6, 0x17, "02f960a7e488d321bdb8044ff5fa1bef83d7041aa4ece7"}, &(0x7f0000000240)=0x1f)
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x534bc297c4704bc, 0x3})
syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0xc4c2c822e4e11799, 0x0, 0x0, {0xe}}, 0x14}}, 0x0)
recvmmsg(r7, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000000c0)=""/93, 0x6c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffc29}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x60000040, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:10 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000003f4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:10 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x10000101)

20:01:10 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x0, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0xffff}, r4, 0x1000000, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x9}}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r6, &(0x7f00000017c0), 0x73, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000280)=0x30)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:10 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x5, 0x40000000, 0x10000101)

20:01:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x2, 0x41)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000240)=""/4096)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:10 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x7, 0x40000000, 0x10000101)

20:01:10 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000404d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x4380, 0x4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={<r3=>0x0, 0xbe28}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x4, 0x2, [0x9, 0x2b]}, &(0x7f0000000300)=0xc)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x109200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000100)=0xfffffffd)
r5 = socket(0x935939c2027e4ca2, 0x4, 0x80)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0x1, &(0x7f0000000340), &(0x7f0000000380)=""/27, 0x4}, 0x20)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000340), 0x1)

20:01:11 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6, 0x40000000, 0x10000101)

20:01:11 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000484d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2c000, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xf1ed3f64de75b9c9, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0xd000000000000000, 0x6000, 0x80, 0x2, 0x1b})
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
accept$unix(r2, 0x0, 0x0)
connect$llc(r2, &(0x7f0000000000)={0x1a, 0x339, 0x7f, 0x81, 0x9, 0x22, @dev={[], 0x37}}, 0x10)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:11 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x0)

20:01:11 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x8, 0x40000000, 0x10000101)

20:01:11 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xb5, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4a5293f5}}, 0x0, 0x0, r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:12 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000004c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3, 0x5, 0x6, 0x1, 0x0, 0x7ff, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10, 0x3cd, 0x6, 0x6, 0x2, 0x2, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x8)

20:01:12 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x7, 0x40000000, 0x10000101)

20:01:12 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x9, 0x40000000, 0x10000101)

20:01:12 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x0)

20:01:12 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000005100)={{0x0, 0x0, 0x80}})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x200200, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000780))
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x400)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x4, 0x1, 0x0, 0x83, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r6, &(0x7f00000017c0), 0x73, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r7, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000280))
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffe, 0xc8, 0x1, @buffer={0x0, 0x90, &(0x7f0000000400)=""/144}, &(0x7f00000004c0)="aaceb6c7c1558e594c75d90943befaf4a3ddddd6a18ea08af807bf3ada1d25e4c4da4160b07872b1e39762292e403acc4295c560667068a982e2b3e9ac66e753db5336a3bbf5d203561b94fb4cdf11783620375016d1fca768e6399fa0300e77e570e3275ec85492f87903e70057ffc2912fe4ddefc2d16a132a61970b357e0b56fa9dbb9432954934701e8d15298a0fa7b25a898a72822c7a61744ab217a2a8310f3c39e137b85dde845621995e3e6d25151f8de7b78a42d9999409fb0cb67b948ddc4a6b343fda", &(0x7f00000005c0)=""/150, 0x3d7c, 0x10026, 0x1, &(0x7f0000000380)})
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, {0x5}}}, 0x90)
r9 = open(&(0x7f0000000300)='./file0\x00', 0x185000, 0x80)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x0)
r11 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r11, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r11, 0x41007701, &(0x7f00000002c0)='^\x00')

20:01:12 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xa, 0x40000000, 0x10000101)

20:01:12 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000684d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "652000ede06b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
pwrite64(r3, &(0x7f00000004c0)="1330d0d08ae1c4312fc3d6c564dbf1c9f091", 0x12, 0x8)
r4 = socket(0x10, 0x8000000803, 0x0)
write(r4, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
r5 = socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="00000100b112cfa17538ed285ed2a998640ffbd93a17ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad2567f0d"], 0x2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x2e, &(0x7f0000000400)=""/191, &(0x7f0000000380)=0xbf)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={<r8=>r6, 0x8, 0x7f}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000100)={r8, 0x1ff, 0x73, "8b0e375b3678cfb8ec2cb7eec791d7fd5c5e558110fe23011fc2e49b43bdd78554ef1d4f5e0b03f06d064d677c3c71bfce36b105a248b029e333541ceb847d36b61887bd16d335ea548fcc28ead31d7ee17b656c0eab8eb547be4e9634cab2ba8e706545da6f4eed3a4b297db4a32cbcc56557"}, 0x7b)

[ 2230.183874][   T27] kauditd_printk_skb: 29 callbacks suppressed
[ 2230.183891][   T27] audit: type=1800 audit(1578859272.803:365): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17281 res=0
[ 2230.319704][   T27] audit: type=1800 audit(1578859272.833:366): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17281 res=0
20:01:13 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xb, 0x40000000, 0x10000101)

[ 2230.501948][   T27] audit: type=1800 audit(1578859273.123:367): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17185 res=0
20:01:13 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x0)

20:01:13 executing program 0:
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={[], 0x1, 0x0, 0x7f, 0x0, 0x1, 0x2, 0xd000, [], 0x9})
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000480)={<r4=>0x0, 0x800}, &(0x7f00000004c0)=0x8)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r6 = socket(0x10, 0x8000000803, 0x0)
write(r6, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
r7 = socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r8, @ANYBLOB="00000100b112cfa17538ed285ed2a998640ffbd93a17ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad2567f0d"], 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
sendmmsg$inet_sctp(r2, &(0x7f0000000d00)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="d785941ed23d0777909cc1e65277c9fff6e7e813a52f6769d0b6817ff51ad52faa7ab499564c4c7b31deb4e6661bfae0cf0fa532226b2a13d7d5220e5fccb4126d347ac4ffa00181a72455f83fbb74292375be9b30ee391e6e86fec17fbe5cdf54f82da8488c751421f580117e85afb1de272099a7d1c3c720b5632f3fb1", 0x7e}], 0x1, &(0x7f0000000500)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x20, 0x8008, 0xb0, 0xff, 0xfffffffc, 0x6, 0x2, r4}}], 0x30, 0x1daa1df404862f30}, {&(0x7f0000000540)=@in6={0xa, 0x4e22, 0x1, @mcast1, 0x8}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000580)="3c463d6c7661aeb6f352550a3c2881659f83329b72e4251c32bc7c81a837e63bb4125912141581bb8fe5483c36855f32bf29f7834f1591cbfbb83e1f66c4aa01ba07dbbe1fb6b089af1cfb55ade9cae1062eb1075baa041ab8ba5c06a0599d0a56de31bad4ee53e4104a466d8c199065cb8b6e731f55cc2e4a0db75e993c476354c778aca974fe3f9058b7be25c8f260a8bc699cf759d38e8fe3a271039270e6e20631e14178c13977a8a29decdf478c9e8069fd6683", 0xb6}, {&(0x7f0000000640)="43182717bebc90d8354c53a7b85e7618cbe25f20c8bb98416f8abb39a59faf656aebd93465e8f5072b8a46c87555115af8e415f88120be803693bfe719b523fd946cbbbd27ec7b04dd", 0x49}, {&(0x7f00000006c0)="845aaefe8c4db8dd4be9c4380d7d07a1fa9924175a4013eca7fd98e856aed23ac7984782b4c681325bb05d19e688ef4b1a4cd971268692385d545a612c14f82eb4ebd33801edc308ea0444dc9b8af675a60132cbbc7097b80d9db9e97d482d259374688afe236c117d44a8f9e78f38c811e550223c6445042b1e8d9d8a58136fd38bb436597faab7f73ec5b585998d88416cde5e3222810f", 0x98}, {&(0x7f0000000780)="67d20c50a82e600ad0b547079d5f84ecb2f7125f0cc5c498504f0dccc209c13caa31f0a30ab8c46228e842", 0x2b}, {&(0x7f00000007c0)="9fd75d4c2aa7d0b1074280939bbf05225b9741222795b513417b13", 0x1b}, {&(0x7f0000000800)="9ce637468528f35449397597081a0a42fe2869f8824e26ce751505c18f451728a69583ded2d489a59c3869e3bfe62769c5fa7bd90523b9595adde7d8f86bbbb2c843a33d76cd64527efe02427095d444e3802df0830a128385780e4775b14905296d7ae4218971c10a9ba4c2c4008b26b8caa0418b19", 0x76}], 0x6, &(0x7f0000000900)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x2, 0x302, 0x10000, 0x4, 0x7ff, 0x3, 0xffffffff}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x7f, 0x3, 0x6, 0x58c8}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x8002, 0x1, 0x7, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}], 0xf0, 0x77011d0c4b27c5bd}, {&(0x7f0000000a00)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a40)="81ac367ef519f92c32254c9b43de", 0xe}, {&(0x7f0000000a80)="c00a4b76124b697661e1331a39887ce03eac2c870107ba443a571a28f7127a90799d3aaa960b85b58ea24c81f10aba369ac04f1cb9fa18f07e38da9e48e88ade42b40e65bef811e99119a4da5c2c895f95b9acb66ec43c22e2e78e8b61db224bf4ea9f7dcc27a8ebe54ca6f72ab33c73cce37caa6c0563e7f60bbfc8c88f34d03a8299743f09550b391266dde005dd1d854bb2c6b6a3c080ac85d887d1c889afc339a6dd10e8d29c9df9971d3b4ce449ba7c0ebb2bc1741387abfb0b39f0", 0xbe}, {&(0x7f0000000b40)="8cf4efd9d5452ca7068b40fdd6fae39485dedd5ed16e05d9851e165a93ef562a385f24a71fc41edf5aefada599209b9671d68048c576a72f4a041076e334db8aba07bc86f038b21deea3a7af262abd8597830909599b54943e752197e0c29feb81ab7cc4da45af36b77db38301bd9e5af337a776666220a9ea39bd7b1e41eaa8b60c5c3db58d7c6a58ab06961d605151e0d9a6730cdba1f6d6fbb2d7f264d3db688792ac5ce4011348cb116c0607c2ce6ea07bc1ca5f25fec07e6617e957985a903ee3c7919e40d13d30eaa1b476b471988e098a638a87030bd23e2f9d028fa5888a514e4777371d5aebb0a53373", 0xee}, {&(0x7f0000000c40)="3c0c3d68bb3e6b58418c697d25f7c0df8eaaca4f6a7ddb5211d153f5309b19287aaa9b94a90720ae4a65714a611a", 0x2e}], 0x4, &(0x7f0000000cc0)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x18, 0x20}], 0x3, 0x10)

[ 2230.617061][   T27] audit: type=1800 audit(1578859273.163:368): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17185 res=0
20:01:13 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x8, 0x40000000, 0x10000101)

20:01:13 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000006c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2230.738055][   T27] audit: type=1800 audit(1578859273.163:369): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17185 res=0
20:01:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf501, 0x1f}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x5, 0x1f)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="660fc7360f015d3d66b8c4008ed0660f38806ef766ba420066ed66baf80cb8d4ebf18aef66bafc0c66edf4c4e2f9051366ba6100ecc4e2e5aac5", 0x3a}], 0x1, 0x12, &(0x7f0000000200), 0x0)
r2 = gettid()
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
accept4(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80, 0x80000)

[ 2230.885356][   T27] audit: type=1800 audit(1578859273.503:370): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16966 res=0
[ 2231.065677][   T27] audit: type=1800 audit(1578859273.523:371): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16966 res=0
20:01:13 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xc, 0x40000000, 0x10000101)

20:01:13 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x417c4181828301bf, 0x0)
getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000280)={@rand_addr, @dev, @initdev}, &(0x7f00000002c0)=0xc)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2231.269481][   T27] audit: type=1800 audit(1578859273.743:372): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16951 res=0
20:01:13 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xc, 0x40000000, 0x10000101)

20:01:13 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000744d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x2, 0x2, 0x2, 0x3}, {0x6f32, 0x0, 0x0, 0x8}, {0x5, 0x5, 0x3, 0x9}]}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xff, 0x2, 0x81, 0x1, 0x0, 0x4, 0x144880, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0x4, 0xff, 0x4, 0x5, 0x2}, r1, 0xf, 0xffffffffffffffff, 0xc)

20:01:14 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x0)

[ 2231.407077][   T27] audit: type=1800 audit(1578859273.743:373): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16951 res=0
[ 2231.534598][   T27] audit: type=1800 audit(1578859273.743:374): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16951 res=0
20:01:14 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd, 0x40000000, 0x10000101)

20:01:14 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
recvfrom$inet6(r5, &(0x7f0000000280)=""/211, 0xd3, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, 0x1c)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/157)

20:01:14 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x10, 0x40000000, 0x10000101)

20:01:14 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000007a4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:14 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x85, 0x0, 0x1ff}, r4, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000300)=0x4)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000280)={{0x2, 0x4e20, @remote}, {0x306, @dev={[], 0x14}}, 0x40, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 'veth0_vlan\x00'})
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)
socket(0x6, 0x80000, 0x80)

20:01:14 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xd, 0x40000000, 0x10000101)

20:01:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:15 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
recvfrom$inet6(r5, &(0x7f0000000280)=""/211, 0xd3, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, 0x1c)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:15 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe, 0x40000000, 0x10000101)

20:01:15 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000000f954d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:15 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x12, 0x40000000, 0x10000101)

20:01:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0xfffffffffffffea6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4040, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = pkey_alloc(0x0, 0x7)
pkey_free(r1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000004c0)={0x7, 0xfcc9, 0x3ff, 0x7ff, 0x6, 0x6})
sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="cf1ff35baadb01f4da92522a8b6bfc7a9e63d66347f07f2de2818a81c80319f221c14c9e72570713069d3fdbff17dbf3d8c8b75f81b4751f53298b254c54dc856b945a90970fd7e8533dd1ef7a98353816c1a3ed00c8ece00115c3f14cc3a4be2b4ecef00c2d2de36ec639330d19687913306d4a7b24764b98452385f4630115fc7ecfa838816ae23429c65b251694f5bf91cebe9baf62442f87862e6ff983b68440fa44bc5cc5584805ce4cc28730af07b1b14433692203", 0xb8, 0x40012, &(0x7f0000000500)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x8400)
fcntl$setstatus(r2, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000300)={&(0x7f00000002c0)}, 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000480)=0x18)
r3 = dup2(r2, r0)
mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r3, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0xf6e)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0)

20:01:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
uname(&(0x7f0000000240)=""/239)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)=""/137)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x519d, 0x0, @perf_bp={0x0}, 0x0, 0x20000, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:15 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000de4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:16 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
clock_getres(0x6, &(0x7f0000000280))
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0xd4bd, 0x4c314356, 0x2, @stepwise={0x1ff, 0x2, 0x11, 0x7ff, 0x68613981, 0xffff}})
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:16 executing program 2:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3, 0x40000000, 0x10000101)

20:01:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = shmget$private(0x0, 0x1000, 0x181a, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/192)
r2 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, 0x0)
setresuid(0x0, r3, 0x0)
r4 = getegid()
r5 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
r6 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, 0x0)
setresuid(0x0, r7, 0x0)
r8 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r8, 0x0, 0x0)
ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000000)=<r9=>0x0)
r10 = getpgid(0xffffffffffffffff)
shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x0, r3, r4, r7, 0xffffffffffffffff, 0x20, 0x7}, 0x2, 0x400, 0x4, 0xb02, r9, r10, 0x1})

20:01:16 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe0, 0x40000000, 0x10000101)

20:01:16 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xf, 0x40000000, 0x10000101)

20:01:16 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000ff4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8d7, @rand_addr="bd57c0378bca8480462ca3014b6bda14", 0x4}, 0x1c)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:16 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe, 0x40000000, 0x10000101)

20:01:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x8, 0xff, 0x1ff})

20:01:16 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000000fff4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x440b41, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0))
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80000, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0xf, 0x6, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46044051}, 0x8800)

20:01:16 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x10, 0x40000000, 0x10000101)

20:01:17 executing program 4:
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x9c47, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:17 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xf, 0x40000000, 0x10000101)

20:01:17 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x284, 0x40000000, 0x10000101)

20:01:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0xfffffffd)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)="5b81949a2724462cb5ab21d9733054e95830fdba3b44cee885f81f188bbbee4d9ae2253d7a431f8336bbd7e1ec5990d8aa0f71d0e14e0e961c53e2167008d816fc17c1a845b9131f86fd2c6d23bb0dc82a0dad88", 0x54)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:17 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000002501000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:17 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x12, 0x40000000, 0x10000101)

20:01:17 executing program 0:
r0 = getpgrp(0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfe41}, r0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fcntl$notify(0xffffffffffffffff, 0x402, 0x10)
clock_gettime(0x0, &(0x7f00000002c0)={<r2=>0x0, <r3=>0x0})
pselect6(0x40, &(0x7f0000000140)={0x8, 0x88fc, 0x4, 0x1, 0x8a, 0x9, 0x7, 0x20}, &(0x7f0000000240)={0x8, 0xd68, 0x0, 0x3f, 0x1, 0x8, 0xf08, 0x10000}, &(0x7f0000000280)={0xffffffff, 0x3, 0x8, 0x4, 0x3, 0x0, 0x35834326, 0xffffffff}, &(0x7f0000000300)={r2, r3+30000000}, &(0x7f0000000380)={&(0x7f0000000340)={0x4}, 0x8})
pipe(&(0x7f0000000480))
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = dup(0xffffffffffffffff)
ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000440)={0x0, 0x1f, 0x6, [], &(0x7f0000000400)=0x1f})
ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f00000003c0))
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x101}}, 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x10}, @in6={0xa, 0x4e21, 0x11, @loopback, 0x7}], 0x68)

20:01:17 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000024d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2235.234325][   T27] kauditd_printk_skb: 34 callbacks suppressed
[ 2235.234343][   T27] audit: type=1800 audit(1578859277.853:409): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16834 res=0
20:01:17 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x300, 0x40000000, 0x10000101)

[ 2235.334734][   T27] audit: type=1800 audit(1578859277.853:410): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16834 res=0
20:01:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x20802)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="52de0da4c1b3ed3b29a426254ca0c8baae6ad0ee709c095bd0705307a446d22f76", 0x21}, {&(0x7f00000002c0)="920985dcdce397415f829de9f730df79bc0fbcf3aaaf595224d0cea6c5265593ce1f245086a3029df9321aa4f58d7ee5cf1b592647edbeb08a290620ad5b0244d67f23214042670b8b86d21d867b53281b451c1812896b10b38af51fcfddf14ae0d21068764d3b25814205e6717b2530f264cd76a762f81ef17ef523727e58fc9d7bc27024e6", 0x86}], 0x2, 0x3)
rt_sigqueueinfo(r1, 0x1d, &(0x7f0000000240)={0x23, 0xedd, 0x400})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000400)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000440)=0x2c)
readahead(r3, 0x80000001, 0x40)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r5 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r5, 0x0, 0x0)
fremovexattr(r5, &(0x7f0000000480)=@random={'osx.', 'net/nf_conntrack_expect\x00'})

20:01:18 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x0, 0x1, 0x4, 0x1000008, 0x40, {0x77359400}, {0x4, 0x1, 0x7, 0x20, 0x7, 0x7, "1d3e9e1e"}, 0xffffff55, 0x4, @planes=&(0x7f0000000340)={0x5, 0x20, @fd, 0x2}, 0x2, 0x0, <r1=>r0})
ioctl$TCSETX(r1, 0x5433, &(0x7f0000000400)={0x1, 0x2, [0x0, 0x8, 0x2, 0x8001, 0xfffb], 0xea})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x842, 0x0)
r9 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, 0x0)
setresuid(0x0, r10, 0x0)
sendmsg$nl_netfilter(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000005100)={0x1448, 0xb, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x9}, [@typed={0x8, 0x30, 0x0, 0x0, @uid=r10}, @generic="1ebb26e075b66cc28a8e8c2f5dc615f5ac4eb52f06bf39bacc62a068bcd06a0f31c7aba13f2ce4c91c847dee9da78432a06d1abcd9f66d4095a632d256bbb0761cfdafa31bd3bbe957823e12d5fcbf4d5fe8ae63d9d417cd7f7cf233f36a7458529c3b827fc8303fd9bcc92d40bb239006c5fb7433210972971cba7ba5fac39c34a51ecc40a772712e432ad86b10375ac624616c9754cce71300af398b15b823a52fe355e0d4a1ce3478df46e960a68808812e5cbaafe0a2aee8c9800700462029e236ffb3cd8a5972943f444468ff93ef1f1b", @generic="f699ee21ed588e68528468d088173f5a5ece5af242b07cadfad37887a32507a296bf1765b996ead5ed2f7e4929c51850ca9db58f1967a3ef151e400e", @nested={0x11ab, 0x53, 0x0, 0x1, [@generic="bb6270a9ad3ee43eb5825df26075ead079137bb908a31be31848cc755c0248f459558a7161847266ac44184c817b63c8e6231e837f6bbefa93ff59c4cbaca1ebeb3cb47d02a93e4828af18eb6564c4e304696051cb06880c881cbabb3aa388bdbbb51613618336b1cd9a2fd1785322e1b9074585fae93b601fae35ef624febd309d7299b00dc70ae0b36c41f6ee7c8651fa927ed08da3019ddd72187c28ca0227f93ecdd979834394cc4c8440dd8734a77e5d0c679e9800a28d1572c957e0e4bae5a46", @typed={0xe, 0x74, 0x0, 0x0, @str='*selfself\x00'}, @generic="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", @typed={0xd2, 0x3c, 0x0, 0x0, @binary="2484faf1962d15adc1da5f749d472d4e457495b8dce6e546ac74d9e98ea9038404802de1513a8c63a3690a6387dd9e5174c084727d60648f987a40fdaa70592566d689b906c4911cd98c4f5879cece2acff6790d68bb7f746400610caede9b1b06c0e6e4a6f7ae527bad2bc61c54858b3f25f4e254aa14f3cefb05285ec3ccbdca38ff149cfd4770d2c635990f2fbb65f1240e48e3f7666a48c0801c24139e8d683f58812df42ee7469be0626b7988c05cdc0bdf5a1eea56f6ee9aac1f7688a9fb4cb7c0ca1ff0eb051eab7951c4"}]}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0xd3}, @nested={0xab, 0x89, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @uid=r5}, @generic="01cbc2b512d7f6e2ee44b4b6eebb50d45305e52e798efd3b7f96a0703d28db85caf4013384cd807b227015360ce3e9c095e15857bd61e7e67155ed8b48647ed283c3a80567e772f1b288b8086b135af10bf42725d6cd4890798b90ad58a66b31db639b867aa36ef85d0655b9e04cb0d8441774bfca3f35fccd1df1ecee4f173ddc988806135d3847eedb175af1543e1f7fd8a5147e26ee", @typed={0x8, 0xb, 0x0, 0x0, @fd=r6}]}, @generic="b2e2b78055355201ea1892f9809fa7159fcbe110873f2d610aa1caf725d2c51ff535624891d331265449812a18718e047fcfa9fcd3d83806a5f29f671a0c4b9181b52a601cc24ec23ed22d0b899f7b1df141cc9dec7cf67979cf5f345a747c1c15db0c41fee2f9e3486ad2b19eeb13cbfa778d7976d1f8f8bfcd8ca467437190bea9ea7bde9f594880cb4f6da735e27240d135beeb6f165dcb5ac489ee3c4dac2a35664133c9c564620f81862cef0d4b873909d5e7b02cbc2dc0"]}, 0x1448}, 0x1, 0x0, 0x0, 0x41000}, 0x80)
r11 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r11, 0xe, &(0x7f0000000180)=""/169)
fallocate(r7, 0x0, 0x40000000, 0x10000101)

[ 2235.475103][   T27] audit: type=1800 audit(1578859277.923:411): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0
[ 2235.513632][   T27] audit: type=1800 audit(1578859277.923:412): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0
[ 2235.535104][   T27] audit: type=1800 audit(1578859277.923:413): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0
[ 2235.555016][   T27] audit: type=1800 audit(1578859278.093:414): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16957 res=0
20:01:18 executing program 2:
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x9c47, 0x0)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2235.575121][   T27] audit: type=1800 audit(1578859278.093:415): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16957 res=0
[ 2235.595037][   T27] audit: type=1800 audit(1578859278.093:416): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16957 res=0
20:01:18 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x68, 0x40000000, 0x10000101)

20:01:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8900, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
clone3(&(0x7f00000002c0)={0x40010000, &(0x7f0000000000), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), {0x24}, &(0x7f0000000140)=""/32, 0x20, &(0x7f0000000240)=""/18, &(0x7f0000000280)=[0x0, 0x0], 0x2}, 0x50)
setpgid(r1, 0xffffffffffffffff)
clock_gettime(0x5, &(0x7f0000000340))

[ 2235.814851][   T27] audit: type=1800 audit(1578859278.433:417): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16564 res=0
20:01:18 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000034d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21, 0xfffffffc, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2235.962153][   T27] audit: type=1800 audit(1578859278.463:418): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16564 res=0
20:01:18 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x500, 0x40000000, 0x10000101)

20:01:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000180)=""/169)

20:01:18 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x20802)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="52de0da4c1b3ed3b29a426254ca0c8baae6ad0ee709c095bd0705307a446d22f76", 0x21}, {&(0x7f00000002c0)="920985dcdce397415f829de9f730df79bc0fbcf3aaaf595224d0cea6c5265593ce1f245086a3029df9321aa4f58d7ee5cf1b592647edbeb08a290620ad5b0244d67f23214042670b8b86d21d867b53281b451c1812896b10b38af51fcfddf14ae0d21068764d3b25814205e6717b2530f264cd76a762f81ef17ef523727e58fc9d7bc27024e6", 0x86}], 0x2, 0x3)
rt_sigqueueinfo(r1, 0x1d, &(0x7f0000000240)={0x23, 0xedd, 0x400})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000400)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000440)=0x2c)
readahead(r3, 0x80000001, 0x40)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r5 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r5, 0x0, 0x0)
fremovexattr(r5, &(0x7f0000000480)=@random={'osx.', 'net/nf_conntrack_expect\x00'})

20:01:18 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x70, 0x40000000, 0x10000101)

20:01:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x9, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0xc)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0xfaf1, 0xf6, 0x7fff, 0x1}, 0x8)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x40)

20:01:18 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000340)={0x3b, @rand_addr=0x40, 0x4e20, 0x3, 'nq\x00', 0x4, 0x6, 0x22}, 0x2c)
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r5, 0x1}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0xfffffeee, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x81, 0x6, 0xcd0})
fallocate(r6, 0x0, 0x40000003, 0x10000101)

20:01:19 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x600, 0x40000000, 0x10000101)

20:01:19 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x10, 0x40000000, 0x10000101)

20:01:19 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000044d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x16, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:19 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x700, 0x40000000, 0x10000101)

20:01:19 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x78, 0x40000000, 0x10000101)

20:01:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r6, &(0x7f00000017c0), 0x73, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000340)={0xa10000, 0x7fff, 0x3, <r7=>r6, 0x0, &(0x7f0000000300)={0x990a6f, 0xffffffff, [], @p_u16=&(0x7f0000000140)=0xb33}})
ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000380))
write$evdev(r1, &(0x7f0000000240)=[{{0x77359400}, 0x0, 0xfc00, 0x40}, {{0x77359400}, 0x0, 0x1, 0x200}, {{0x77359400}, 0x14, 0x8, 0x800}, {{0x77359400}, 0x14, 0x93d, 0x9}, {{0x77359400}, 0x2, 0xc4, 0xae6}, {{r2, r3/1000+10000}, 0x10, 0x81, 0x4}, {{r4, r5/1000+30000}, 0x3, 0x0, 0x8e0d}], 0xa8)

20:01:19 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000054d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:19 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
write(0xffffffffffffffff, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
r7 = socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r8, @ANYBLOB="00000100b112cfa17538ed285ed2a998640ffbd93a17ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad2567f0d"], 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r8, 0x9}, 0x8)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:19 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe0, 0x40000000, 0x10000101)

20:01:19 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000340)={0x3b, @rand_addr=0x40, 0x4e20, 0x3, 'nq\x00', 0x4, 0x6, 0x22}, 0x2c)
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r5, 0x1}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0xfffffeee, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x81, 0x6, 0xcd0})
fallocate(r6, 0x0, 0x40000003, 0x10000101)

20:01:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:20 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x900, 0x40000000, 0x10000101)

20:01:20 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000064d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:20 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xa00, 0x40000000, 0x10000101)

20:01:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000240)=""/199)

20:01:20 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x300, 0x40000000, 0x10000101)

20:01:20 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000074d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:20 executing program 0:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8, 0xfd, 0x0, 0x80, 0x0, 0x7, 0x8f902c5b08a50523, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6}, r0, 0x0, r1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
ioctl$int_out(r3, 0x2, &(0x7f0000000240))
fcntl$setstatus(r2, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000000000))
r5 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r5, 0x0, 0x0)
ioctl$TCSETXW(r5, 0x5435, &(0x7f00000000c0)={0x2, 0x8, [0x4aa, 0xfff7, 0x3, 0x7ff, 0x1f]})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:20 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = epoll_create1(0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r4, 0x81601000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:20 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000340)={0x3b, @rand_addr=0x40, 0x4e20, 0x3, 'nq\x00', 0x4, 0x6, 0x22}, 0x2c)
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r5, 0x1}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0xfffffeee, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x81, 0x6, 0xcd0})
fallocate(r6, 0x0, 0x40000003, 0x10000101)

20:01:20 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xb00, 0x40000000, 0x10000101)

20:01:20 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x500, 0x40000000, 0x10000101)

20:01:21 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xc00, 0x40000000, 0x10000101)

20:01:21 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x0, 0x3)
r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x0, @empty, 0x4e21, 0x1, 'lc\x00', 0x3, 0x80, 0x6c}, 0x2c)
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r3, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @broadcast, 'vlan0\x00'}})
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000010b70000d4dc000000000000030000000000000002000000000000000400000000000000000000000000000000000000000000000000000000000000090000009463000000000000000000000bb4000000000000ffffffff0000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0000000000000000000000000000000000010000001900"/381])
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:21 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000084d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:21 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:21 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd00, 0x40000000, 0x10000101)

20:01:21 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x109002, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0}])
io_getevents(r1, 0x0, 0x800000000000042, &(0x7f0000000000)=[{}], 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000100))
fcntl$setstatus(r2, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:21 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x1200, 0x40000000, 0x10000101)

20:01:21 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x600, 0x40000000, 0x10000101)

20:01:21 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000340)={0x3b, @rand_addr=0x40, 0x4e20, 0x3, 'nq\x00', 0x4, 0x6, 0x22}, 0x2c)
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r5}}, 0x48)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r5, 0x1}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0xfffffeee, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x81, 0x6, 0xcd0})
fallocate(r6, 0x0, 0x40000003, 0x10000101)

20:01:21 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000094d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:21 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x2000, 0x40000000, 0x10000101)

20:01:21 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:21 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x4800)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000280))
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0xfffffff9)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000440)=0x9)
r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x101000)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc7b, 0x4}}, 0x0, 0x0, r3, 0x0)
r5 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r5, 0x0, 0x0)
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f00000002c0))
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r7, &(0x7f00000017c0), 0x73, 0x0)
r8 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r8, 0x0, 0x0)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFNETMASK(r9, 0x891b, &(0x7f0000000480)={'vlan1\x00', {0x2, 0x4e20, @rand_addr=0x10000}})
ioctl$KVM_GET_NR_MMU_PAGES(r9, 0xae45, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f00000003c0)={0x6, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}]})
ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000000)=0xa10e)
fcntl$setstatus(r4, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r10 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r10, 0x0, 0x0)
setsockopt$rose(r10, 0x104, 0x4, &(0x7f0000000400)=0x3, 0x4)

20:01:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x100, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x70002)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x14)
fcntl$setstatus(r0, 0x4, 0x42000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz1\x00', {0x3, 0x9b93, 0xd7ce, 0x7d0}, 0x46, [0x7fff, 0x5, 0x0, 0x7ff, 0xfe3d, 0x40, 0x2, 0x9, 0x8, 0x5, 0x6, 0x4, 0x0, 0x9, 0x5, 0x8, 0x21, 0x400, 0xf9, 0xffffd204, 0x0, 0x6, 0x3f, 0x7, 0x9, 0x0, 0x0, 0x6, 0x80000001, 0x9e5c, 0xfffffeff, 0x80000000, 0x2, 0x7, 0x5, 0x7, 0x80000001, 0xffff8000, 0x7, 0xffffffff, 0x7, 0x8000, 0x3, 0x3f, 0x5, 0x2, 0x3f, 0x401, 0xffff, 0x0, 0x2c, 0xfffffff7, 0x9, 0x1, 0x8000, 0x1, 0x0, 0x80000000, 0x87, 0x5, 0x1, 0x7b, 0x3c, 0x80000000], [0xfffffe01, 0x9, 0x49, 0x7f, 0x10000, 0x80000000, 0x8, 0xf745, 0x40, 0x9, 0x3, 0x1, 0x8e8, 0x56, 0x101, 0x501, 0x0, 0x6, 0x0, 0x322a, 0x80, 0x0, 0xfffffc01, 0x6, 0x81, 0xffffffff, 0x5, 0x3f, 0x64, 0x7, 0x2, 0xffffffff, 0x7, 0x101, 0x2, 0xfffffe01, 0x5, 0x7, 0x40, 0x42, 0xfffffff8, 0x80000001, 0x7, 0x9c, 0x9cc5, 0x7, 0x6b, 0x5, 0x3f, 0x1f, 0x7f, 0x5, 0x3ff, 0x20, 0x9, 0x5, 0x300000, 0x0, 0xf55, 0x1, 0x9, 0x81, 0x3, 0x2], [0x9, 0x1, 0xffffffff, 0x1f, 0x9, 0x1, 0x5, 0x3, 0xffffffff, 0x1f, 0x2, 0x8, 0x8001, 0x80000000, 0xf542fc4, 0x80, 0x800, 0x1, 0x3f, 0x14, 0x4, 0x0, 0x4, 0xdbb, 0xffffffff, 0x7, 0x1, 0x2, 0x8, 0xff, 0x5, 0x80000000, 0x5, 0x5, 0xfffffffe, 0x100, 0x80000000, 0xfcf, 0xb1be, 0x5, 0x0, 0x4, 0x63, 0xf38, 0x80, 0xad7f, 0x8, 0x7, 0x1000, 0x0, 0x0, 0x7, 0x8b, 0x9, 0x3372, 0x8, 0x0, 0x1, 0xf56, 0x3, 0x80000000, 0x7, 0x8, 0x3], [0x100, 0x80000000, 0x7, 0xfffffffd, 0x100, 0xffffff01, 0x400, 0x10000, 0xa7ee04c, 0x8, 0x2, 0x10000, 0x7f, 0xffffffff, 0x5, 0x20000000, 0xd9c, 0x8, 0x1000, 0x6, 0x800, 0x100, 0xd7a, 0x3a9, 0x4, 0x20, 0x1, 0x7fff, 0x4, 0x7, 0x6, 0xffff33ec, 0x0, 0x7, 0x7fff, 0x7ff, 0x9, 0xffffffff, 0x5, 0x9d9, 0xffff, 0x6, 0x81, 0x4, 0x7, 0x6, 0x1, 0x3, 0x2, 0x0, 0x80000000, 0x1501, 0xfffffff9, 0x3f, 0x3, 0x231, 0x4, 0x4a411ff7, 0x8, 0x1000, 0x34, 0x80000001, 0x2, 0x1]}, 0x45c)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:22 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x700, 0x40000000, 0x10000101)

20:01:22 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000000a4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:22 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xc0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:22 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3f00, 0x40000000, 0x10000101)

20:01:22 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x109002, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0}])
io_getevents(r1, 0x0, 0x800000000000042, &(0x7f0000000000)=[{}], 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000100))
fcntl$setstatus(r2, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x210, 0x3, 0x3, 0x0, 0x6}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:22 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x70, 0x40000000, 0x10000101)

20:01:22 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000000c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:22 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xc00, 0x40000000, 0x10000101)

20:01:22 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x400, 0x40, 0x9, 0x10001, 0x3f, 0xff})
open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x28)
shmget$private(0x0, 0x3000, 0x36701e3b36334d1b, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x181a, &(0x7f0000ffe000/0x1000)=nil)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f00000002c0))
ptrace$getregs(0xc, r3, 0x0, &(0x7f0000000400)=""/131)
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
write$P9_RSTAT(r2, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {0x0, 0x75, 0x20, 0x20, {0x37, 0x2, 0x1}, 0x10000000, 0x20, 0x6, 0x7, 0x12, 'procvmnet0.system*', 0x10, '/dev/input/mice\x00', 0x10, '/dev/input/mice\x00', 0x10, '/dev/input/mice\x00'}}, 0x7c)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/192)
r4 = shmget(0x3, 0xf000, 0x0, &(0x7f0000ff1000/0xf000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/162)
prctl$PR_MCE_KILL_GET(0x22)

[ 2240.242584][   T27] kauditd_printk_skb: 64 callbacks suppressed
[ 2240.242602][   T27] audit: type=1800 audit(1578859282.863:483): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16586 res=0
20:01:23 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x8402, 0x40000000, 0x10000101)

[ 2240.344581][   T27] audit: type=1800 audit(1578859282.863:484): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16586 res=0
20:01:23 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffffff1f}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x801, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x181a, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/192)
shmctl$SHM_INFO(r1, 0xe, &(0x7f00000000c0)=""/180)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

20:01:23 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe0ff, 0x40000000, 0x10000101)

[ 2240.549713][   T27] audit: type=1800 audit(1578859282.863:485): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16586 res=0
20:01:23 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000104d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2240.636006][   T27] audit: type=1800 audit(1578859283.133:486): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16525 res=0
20:01:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
userfaultfd(0x80000)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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")

20:01:23 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2240.758491][   T27] audit: type=1800 audit(1578859283.133:487): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16525 res=0
[ 2240.851621][   T27] audit: type=1800 audit(1578859283.473:488): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16583 res=0
20:01:23 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xff01, 0x40000000, 0x10000101)

20:01:23 executing program 0:
r0 = clone3(&(0x7f0000000340)={0x40000400, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x13}, &(0x7f0000000240)=""/121, 0x79, &(0x7f00000002c0)=""/111, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}}, r0, 0x2000000000000, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2240.989691][   T27] audit: type=1800 audit(1578859283.473:489): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16583 res=0
[ 2241.055949][ T8706] IPVS: ftp: loaded support on port[0] = 21
20:01:23 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xd00, 0x40000000, 0x10000101)

20:01:23 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000234d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2241.166418][   T27] audit: type=1800 audit(1578859283.643:490): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
[ 2241.285989][   T27] audit: type=1800 audit(1578859283.643:491): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
[ 2241.329700][   T21] tipc: TX() has been purged, node left!
20:01:24 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xff0f, 0x40000000, 0x10000101)

[ 2241.392078][ T8706] IPVS: ftp: loaded support on port[0] = 21
[ 2241.395934][   T27] audit: type=1800 audit(1578859283.643:492): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
20:01:24 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:24 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe00, 0x40000000, 0x10000101)

20:01:24 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000484d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:24 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb7, 0x2}, 0x8000, 0xa, 0x5, 0x21e64aaa0d4e8277, 0x0, 0x7fff}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
fcntl$setstatus(r0, 0x4, 0x43800)
r1 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000300)=""/186)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r3, 0x0, 0x0)
ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0)
ioctl$VT_ACTIVATE(r2, 0x5606, 0xffffffff)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @rand_addr=0x1}, 0x2, 0x0, 0x0, 0x0, 0xdb7, &(0x7f00000000c0)='veth1_to_team\x00', 0x3f, 0x7, 0x400})
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f00000002c0))
capset(&(0x7f0000000180)={0x19980330, r4}, &(0x7f00000001c0)={0x80000, 0x0, 0x6, 0xe1b3, 0x6, 0x1000})
bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12)

20:01:24 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xb, &(0x7f0000000180)=""/169)

20:01:24 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xffe0, 0x40000000, 0x10000101)

20:01:24 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101101, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
socket$caif_seqpacket(0x25, 0x5, 0x1)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:24 executing program 4:
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x100)
write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800000000000}}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5], 0x1}}, 0x400d800)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002bbd7000fbdbdf250600000014000600766972745f77696669300000000000001400060076657468305f746f5f687372000000000800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2044800}, 0x8002)
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
dup2(r6, r3)
r7 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
ftruncate(r8, 0x80)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:25 executing program 2 (fault-call:21 fault-nth:0):
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x10000101)

20:01:25 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3c000, 0x40000000, 0x10000101)

20:01:25 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000004c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:25 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xf00, 0x40000000, 0x10000101)

20:01:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
accept4$tipc(r1, 0x0, &(0x7f0000000000), 0xc1800)

20:01:25 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000684d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
accept4(r1, &(0x7f00000000c0)=@caif=@util, &(0x7f0000000000)=0x80, 0x101400)

20:01:25 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x2400)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
accept4$inet6(r1, &(0x7f0000000000), &(0x7f0000000280)=0x1c, 0x0)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:25 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x1200, 0x40000000, 0x10000101)

20:01:25 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x0, 0x10000101)

20:01:25 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3c800, 0x40000000, 0x10000101)

20:01:26 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000006c4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
flock(r0, 0x8)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:26 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3d000, 0x40000000, 0x10000101)

20:01:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000140)=0xc)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x1f}, 0x680, 0x2, 0xdf1, 0xc, 0xfffffffffffff963, 0x9, 0x100}, r1, 0x6, r0, 0x1)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:26 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000744d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:26 executing program 0:
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r0, 0x0, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r3 = socket(0x10, 0x8000000803, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x50080, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
write(r3, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
r5 = socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r6, @ANYBLOB="00000148b112cfa17538ed285ed2a998640ffbd93a0c0517ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad256"], 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={<r7=>r6, 0xbc, "0a05942814a61e9d0a3117505074ed0721fd08ee24b0d1070fb125a118a90d7dcc649c5eef6f24814ec01d4dbfab8f6ed9a17a7fe02088c7a11e3daff1b4d7f2b300aaa68551054006b6a866c8cc8cb7c5e06e7bfe79dec124b1b723353913459d523b77684414bcc45cb330608e1fdd37360af09e0765e35d54d0fb992d54a7e9d082ce703069c45711bb5db64760798c9df0fe276451be3fefc2f7878bb7674312adccf4a9b286e9223645bd121b06a6a876e2d8002be0f0ee5841"}, &(0x7f0000000000)=0xc4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e20, @multicast1}}, 0xfff9, 0x20}, 0x90)
r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r8, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = getpgid(0xffffffffffffffff)
syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/ipc\x00')
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
setns(r3, 0x20000000)
ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000140))
r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x162a, 0x8940)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000000c0)={0x1, 0x40}, 0x2)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
ioctl$int_in(r5, 0x0, &(0x7f00000002c0)=0x200000000)

20:01:26 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x2, 0x0, 0x10000101)

20:01:26 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4, @in=@remote}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000380)=0xe8)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:26 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x2000, 0x40000000, 0x10000101)

20:01:26 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3d800, 0x40000000, 0x10000101)

20:01:27 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a000000000000000000007a4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xcc)
setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000000c0), 0x0)
ioctl$TIOCSCTTY(r1, 0x540e, 0x9)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:27 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x3f00, 0x40000000, 0x10000101)

20:01:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:27 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3e000, 0x40000000, 0x10000101)

20:01:27 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000de4d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:27 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x3, 0x0, 0x10000101)

[ 2244.909711][   T21] tipc: TX() has been purged, node left!
20:01:27 executing program 0:
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
accept$unix(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r2, &(0x7f0000000380)=""/86, 0x56)
request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000180)='cgrouptrustedwlan1em1wlan1vboxnet1\'cgroup\x00', r2)
r3 = shmget$private(0x0, 0x2000, 0x2d4e9c7a418f257e, &(0x7f0000ffc000/0x2000)=nil)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x14c8)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, {0xc0, 0x3, 0x5e, 0x1, 0x7f, 0x4}}, 0x8)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000000)=""/151)

20:01:27 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x312742, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000280)=0xfffffff9, 0x4)

20:01:27 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6800, 0x40000000, 0x10000101)

20:01:27 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f00000002c0))
clone3(&(0x7f0000000440)={0x100, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r4=>0x0, {0x6}, &(0x7f0000000300)=""/42, 0x2a, &(0x7f0000000340)=""/90, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x50)
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x80, 0x9, 0x0, 0x9, 0x0, 0x6, 0x3c049, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x3f}, 0x2a021, 0xfffffffffffff001, 0x6, 0x6, 0x0, 0x3, 0x7fff}, r4, 0xa, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, 0x5, <r6=>r5, 0x0, &(0x7f0000000000)={0xa10906, 0x7fffffff, [], @ptr=0x9}})
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:27 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000005c01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2245.302704][   T27] kauditd_printk_skb: 44 callbacks suppressed
[ 2245.302732][   T27] audit: type=1800 audit(1578859287.923:537): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16721 res=0
[ 2245.459726][   T27] audit: type=1800 audit(1578859287.943:538): pid=8907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16721 res=0
20:01:28 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3e800, 0x40000000, 0x10000101)

20:01:28 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x4, 0x0, 0x10000101)

20:01:28 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x7000, 0x40000000, 0x10000101)

20:01:28 executing program 0:
r0 = dup(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x26, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x10a022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0xd908, 0x0, 0x0, 0x1e71e2ac97e4ef23, 0x8000000000, 0xfffffffd}, 0x0, 0x0, r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2245.593295][   T27] audit: type=1800 audit(1578859288.143:539): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16580 res=0
20:01:28 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x400)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x161102, 0x190)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000400))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
accept4$tipc(r2, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0xc8000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x3b, @remote, 0x4e22, 0x3, 'wrr\x00', 0xc, 0x6, 0x62}, 0x2c)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r5, r5}, &(0x7f0000000140)=""/83, 0x53, &(0x7f0000000000)={&(0x7f0000000040)={'poly1305-simd\x00'}})
open(&(0x7f0000000380)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
r7 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r7, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f00000002c0))
r8 = socket$inet6(0xa, 0x6, 0x2)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)

20:01:28 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a0000000000000000000000ff01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2245.844481][   T27] audit: type=1800 audit(1578859288.143:540): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16580 res=0
20:01:28 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0xa}, r0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2, 0x6, &(0x7f0000ffd000/0x2000)=nil, 0x8})
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
write$P9_RREAD(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="4f00000075020044000000ccd20d7309bfd5e2c3eb96cac8cd4148df4cfb617d58b25305a6fb77854637b751a43900b9d42648b9eab398f1642ee646"], 0x4f)

[ 2245.966887][   T27] audit: type=1800 audit(1578859288.143:541): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16580 res=0
[ 2246.081756][   T27] audit: type=1800 audit(1578859288.183:542): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16986 res=0
[ 2246.101834][   T27] audit: type=1800 audit(1578859288.193:543): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16986 res=0
[ 2246.121909][   T27] audit: type=1800 audit(1578859288.193:544): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16986 res=0
[ 2246.142162][   T27] audit: type=1800 audit(1578859288.643:545): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16722 res=0
20:01:28 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3f000, 0x40000000, 0x10000101)

[ 2246.163136][   T27] audit: type=1800 audit(1578859288.643:546): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16722 res=0
20:01:28 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x7800, 0x40000000, 0x10000101)

20:01:28 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x5, 0x0, 0x10000101)

20:01:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffff)
fcntl$setstatus(r0, 0x4, 0x42000)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
r4 = getuid()
r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7f, 0x200100)
r6 = getpid()
r7 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r7, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000380)=<r8=>0x0)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f00000002c0))
sendmsg$netlink(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000000c0)={0x78, 0x29, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x68, 0x9, 0x0, 0x0, @binary="8303493b3e417e54fb42975bb58a7041c6f721c04cc7e004c975bb4f96551ffb2b3b3df1267c23b5e62b0fbdd04fb6d586ca38e7111092ea633a8d54e0bc6ba087800d1581f97c475f95fa4c3637530925d9fca6d44064d3155b22319b475f6a15db9e36"}]}, 0x78}, {&(0x7f0000000240)={0x120, 0x17, 0x1, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x28, 0x0, 0x0, @str='`M@\x00'}, @generic="410cfa4ef1e28bf128e73b8f1f733f744e81c3e13b9dbb59ed366c7fccf5d5201e2b5231b8f98f5a65364e3f3367927d3e14410dd137c86f75f4fd5eb49c5334a061f259da651fcbbd94c13eb49f13843174d0821f13ead16472679addeb9d7cdefa0c2cc83964cad3a48c47a3a0d322bc18d383ad53221ddd25bc4f4ef1fdf1dd4a46e6f2536a4b7e2974698b6954e459d6caf37298664d3564f26d2cda68b81852f17d53bc4dc4e05431765481048828092e696eaafc666c8617a8a015f1b6f7f9236d2a87a030512fafa187783d60bc06e5ae4a202fcbca7edb2dca679976c470fe129383679efb99105d4a4b220a042873b763284a8cf956", @typed={0x4, 0x8a}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r1}]}, 0x120}, {&(0x7f0000000480)={0x71c, 0x30, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x277, 0x43, 0x0, 0x1, [@generic="ec6033d6736e136ff7c8eaa878f0292dbdb688e938c022e423399cd9de4431fe1b388ddc7e40762e88df6a2e8f9ad4f0e55f86f47048b9f2e1509ef404e7deeb981e9465a0b8b7252fd9aaf79a9f37bbb549e90f2dbe5df5c3a9c7e35d0ad2092ffe5a5a38398c9a1c5be702d16480ec628d5d7af2d752be48b90408d264476fe8c2a63ffdc83ba218e2dce9d8b746eb4d2f5016eba1c505c182a4799dae2d61d1ff075ada884f2be3a0ed64aeab820ea47de6a12b4f79ccc9ebd2a3", @typed={0x8, 0x8b, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@mcast2}, @generic="4ca33bdf7d2714a398836ca6e0f7416c056c22214aac8cd6d0b544ee3fdd42a2b69361476b7b9a02dae35ee4fc72778d90c22cb5733f1a1048a8b0d0744f415762adeb5ba2256d9bd7917a13eabf43235d008859e1cc8cea74b9ec2abf88ec5a74cedd0945f5b022608e09599d176bc2830d4a598df91221d415a6", @generic="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", @typed={0x8, 0x6b, 0x0, 0x0, @uid=r4}, @typed={0x1c, 0x49, 0x0, 0x0, @str='net/nf_conntrack_expect\x00'}]}, @generic="6660d2ce76a8acbbc87ad8710145fe10dfa9ff908013576f803c1cdf47633e0e6e596bda538228c7a88d9d55cefa35f8c4082272d19e549285764c6712d6ec4e2a6b378c8b63296c349f491b0e8752d64660f4b66bdabd6f0ebca240070f223a0451a0b17d526da78990b34b2cc9822557445591067db09406aebc03d47bf87971122fec34377ead62ce7f83082d6032278bf30036ba3b01e3f42817aac0618afe727e32e882bf24e64643667aba16f58799d320b0be04a80586c88df54ee44c3fd8011de8cf0eea38855f60046bc390e2738267a07f0e1a2d0058142793b4db3dfc87e504bbf4b4", @typed={0xfc, 0x24, 0x0, 0x0, @binary="7a9ccbff715a8ec2b7082a82f91d0caf63f6c87fbb250a37be87f2ba497942472d5fb9eb6198e58702c4cb7514db19259eb0b3e0a160c91d5488a1ca718868fb537dfc2797cf6b988aafeaa5282e50f395148fec6d145f254bb6edccaeb24c08fc81b152bb5a8bb2be3e7b2a6214f7eb48e97976ba40d4c8d42cd41ee3db6e24efdaf035cd3ce6e99b05b942308075c0e6f58a3ecbed54d3a4380820d4ff30113b06b7267945a3be944ed1d6a25bdf6e0e0b1766cc2f6881e2555cfcecfae4c4a2a14f7920ae122cb28a442774ac1db7ce52c9eaea2b16dd77a3980a104cf91d67bcb5f3068cf0efc3a1ee947a34da7776911bc1dcbdb514"}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0x63}, @nested={0xbd, 0x2a, 0x0, 0x1, [@generic="493be353f714f49a814611608d29d024de607b724f1d11dcb88f2a2313b70cdfe5456ba4e664277fc10917a2d9362a63bd4ff6f6c3eab70a46a5e5e537326baafa1c55356bd9203d3e39e3bb14a3f4a7ffdeb414131ed773295d0e83d56324bf84793a42bdf77cc8fdd1e63a7df1a71b8f122c5135d9fe425c19fc76ca843f69ffef3bf5889732b893dfd15064a03bb60ff56eff6a689ec76ae192ade5ecdaa2d624ade8bcd4247ae5d4d6daeb0ac1ea657f37f14b85761ff4"]}, @generic="df54c74cccf17248d4cf7a7ff1d9d2e04b1f9184825e29099cf433a0685b7073cccf4ec7a2bfce78ad4c56c3bfb2dd2bf76335daeed7de0cdc1fc88ff1b67a838406366364a34c994e954a2c0dbadb0532072e88222bf932dd6a8f304ae5ed8ad58fa1f05de6d184b15cc7aa57246bcc34729a21a8a16d4a", @nested={0x119, 0x25, 0x0, 0x1, [@generic="ef3e87820ab70074a7ee3a962df33961e5ced0e8bdfa5feef3d32be7614958f65c407d905e8bf6f30ad728ef35985454675ba730a99f31af58d17a49e6009a954d8857fa6af3e9680e54332a0e281d8be81dabc1a400f43176af572883bda8bb0766e95019253b1e60a42b55cd3938a4d404be9ef09f15aaa2bf379608485aa6153a5f6754c1f90793dacb32218447c28cd867d3139a68d3c57e0be96bf390b4949a2fc1c36d794427efbe44a271aaa710ced9901318852c41953388f3502fbfb379805b564077a11e6905c8ab7be3801b719f63387f76", @generic="7f9d3c187a823f93b6e7d1701c203aa98e78690ad6cad55d639f7338855f6c700ea08462fe8183950a53964625f54faa0f3a", @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x3ff}]}, @nested={0x4a, 0x42, 0x0, 0x1, [@typed={0xc, 0x27, 0x0, 0x0, @u64=0x7fffffff}, @generic="b98edb6839c1420be582353798ddf75e7f04939ea04fd9209a79ff2e46645d8865085beafb88bc08d56b56570737d2bbd9ded913ad27a8118184"]}, @nested={0x4, 0xd}]}, 0x71c}, {&(0x7f0000000bc0)={0x1298, 0x3a, 0x1, 0x70bd26, 0x25dfdbfb, "", [@nested={0x123d, 0x33, 0x0, 0x1, [@generic="f2fa1d326299a2551b5e31019294694f59667b3549bf64e9f37136037f98072b427a442998741877e9b6689648598ff847d5f264456eddb7714f15cc7d9e2ec19ad9ac4930aa1b72d97790ad755dc730ad96994d0ab0f636f8373d986772d55f50d5608f71291b2537dc70d32f1571964461eee8dcaa183220a6eef215aeb25b32732ba9b7d3e15f1940d9a29887ab383aa279972079fdcae1d374774c29a85649dea804ba161ef7f3e2ce004838ebc1b4e79d07869d55a1c4800ed5102c227fc6435735f118e55a76afdb0152b8a0602e2ffc576f389ea41bb3", @generic="9948235ce3514281775aa08632641694c2c743cae618d70fe6b06ab94618bffd52f33ee862ee058035fba716627bcc29b8d88795fa6006827bbede747b035c575fcda1f42e6b39d33a5f7a9496316d9987e062d158b5a491ed36127f7d9034c86aded7bbd4ad59385909458b36cd20b6e992bf76", @generic="0af31795b600674ff218ce72d7bd6573dd1dc97c6239cd70215bc2041e034fe0eac86992c75545769bda90551660d28d4b152a8e740cd86e8f52c62cdd7207e1918944fe7f53e9681b029182030fffdd3793b1822a4d448317d08ba7d8cc73b257505d44ed428ddd3b7b19a9620476b2d48db041b5b164b659e23c69b03c1dc08720e73f478e72d30b9a955c08419e198e8fc14eadc7cb9fb8a939865e16722cabba389cac6cb5994d2c9fbfa249ebac75b036898a54c017ed43b751c74d6a49f07cbdb7b0eccdd22331f0ab436fd93a1a30a367eff5ff670c2767", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x800}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x8}, @generic="f5120036023b95c385b99360d575ad4932f4e802fae45b6828d853f2ae334207bced993d4c092886047f632de855023f53492fec8ecf2bd3d82a09c518fc29cd9bdd89d8560cbe14610589bb378bacfb1e7610015fc5e3333e199c5d098d2ecaaaba67e5acf5ed30dc7d385be5dc737694205d15bcf3ac125d0b51ed525dedc0d0e8a3a37a650b3d6fdddbe5d593697f008021310b5ab6d2cfff82d9be928b5aa221223f17c960ff8364071a2c43c9b22c7f7a6cfdd239ed54a73f517149cb52fb0a9929d04410c37d941e825b61d5d634668ced1f8ac4911eda40c74972b8d4bf1bd89f7400554ac42ce8d200b04fe3976b714675cefc8486600c287c19107bf8b4efca4e27f228afba951a14734f9355578ecc60bb141c59801a9ae351348bbdaef7455a5ab1fc5c56448cc5e892bc9b531e07d6d4e98b585c3507bed58b15bfd1da64b5f8ae028eadd863fd72066f59d2abaa8f3f9f7d8a8f7965c62aa242b21ede5ff47794550afc7e0f3a2756aa2de487d80608b8f14edfcc1946ae45053dea66d3b197830129bedede3868887b34ddc11232cd2c371be2e4bd765ed868ff546a894c0dec39d6dfff5f1152440e84f066a657e85507d84fd8b9727da00ea06f0d58a779ebe250581df225fff90c07ac6e5082b2817a73b9b2de0a7c49151ec2d95ff8b91f219960785955d834068287e677571d39dba9db9e147ebbe8ec8f03210a93a26ebc27d04bb89d2d5099064d7407b892de44f0fc24de0b91310643412560ef91abbf60c95954b413f59c7ab2ae5e5281c2fb93ebd57d8208f9cccacb342b3c1890637ea9c96768d014f9ebca22af639fc005a9a34117b7e8b0fb815909aee6240325371df04fdb7373d5379b21d84350dfbd2e5eef2d427c2e1398c621d4e22f8ebd71b10db46e49ee994f6dd6f5a3dc6b5c2c3283f6db62362459beb5171ff1e18d3da49d1b48235af6de0f56c94f2f402b52733c08ec3f1ceec9ecd5139b4418318510abbe95e5f3352ffd85ca4b548c49eea145705012bfcaf5ab4fe9b58ef0f0574f9f877274fb4a953ff3e4baaf8cef201c3a37ece133d728a4c6fe41b81dbc40b0f5cb58486e156c09701edccc90c2636621bd01697f4ba49f76444bc8555cd80e7f8040e068656dcf2f44ebb322c99aa090a2c76de8b5b75252225ea7cc86277bbed62dd2eb91383b12aafa399d17c38ad14680784c0daddb9470d656c86fc03ebe568b067b06530f26696afa415ca551b7d4a10ffe31832ee07c33f54d3b1372ebb515d539ca66b7cef7a8cbbbe619a6b9cb8afa5ead6a29d18bee51defa0904968169e1d18ff605694556be6e6b1db60a6446eb660d15bc6f4a41e3844b27d183773043ea49d251c4dc1b54356610512af16cdbeb311f95d13662cf55b507cc807ed8d88ef4a7b6bd81b6e2c60bd23b0c16e64bdcfb9f00c840f2a7e963cf1f7b4b8931f0b7c78f4a1de696c0f50c196a6849f9560e8479621798c7afe01b815947bcfb7687f713eff9f7cc42c8168aed8afc89f68628462f28fe0bd4bc2a13fae57bfb736a3c9ecaaa3f98837561c6903c9116be7a955946a64c69f5c4e80f426f73d012525a22e24c02b59ab86ce41dcae7bc0dbf48796f15fb15b9a125fea56be896ac79e3318d32fdf5f0e027e9ef6dbd0fa203969be20a10392f3a90e30d219c9ff34a778dd8352aae57889e4b1b4d6919dd52e900b34f695ae3a5880e05e5d7bac09da83795b39b21a0b3aa17fec6f45f568210f325a70caa11a7181e06993b5a753a9ef58a7513ce2c81e88bc35be00efce7b35dcddc73986f03b07057553a4042bb0af5c9177033d23bd60c28688ba51fb9a39da2e661fec74506b7d7ff4d3d2e850c0944ae6c24119e8260f1a95a7cc56b3246fca587e7bd9918b51260fef8d48bc51c2ae9d88bfbf5d8644ae7c7aed29c0e029c0b635d55c3265792e984ff2b2a8405782373dc2b592b09cc44d9f31bb6f2d0672e15581173c7ec655dab4f227a8e77be5bc91edf5342b6a16cd8d04c63cc3653ecdaca7c185ce5bf1c3fa8a1da3fa845dc43ad50f3c561298e9ae8aca1250cfeaf8bf21d17c65da1a654e52031610f6a1d49aab688f740e2a7f5d6eb44cc88b3c8a8e85cb42595cc149b2e29bd39deebce73c7902b4dd2e990939908e063708079c7f2c836867e0c2c3cb19ef3ec1ca2249ae1038db9bbd59d40a04d58777a400bfbf57ffa0d598358ab75eff20b687abd3a9765d89630a944db386e4d1bdd40a67dc1da196a02deca81e8706d21efc8b3874df390d525ccf8abdbf3738c8d5d1d91c1eeca1554b0d318b7659a2b591f82a2235261dc90bfdce2da0dafa4e61d10eb22bd47da8451893f4f7a13cae2ca5efb572027feb47661e7a1d54bc0bea0bd679eda09663d9b1c684c3a880197e193855d40dedeed225132fd233634864e91463972380208d19d5fac3b06c40759016526ab8afce427896361a468aad1246533024cdc879cacca3da150cf7559bbb1be98c8849e140289243e32bf581ce8fc07a202200f5af3862f87e37f6d3ba5ab271f7a6681a2cc7646190387f4a06b0c7e7e878c9bbfa0ac57003df58f0d2ddb2c9ca829110b1f77b802f8ffe6300f86674c3e7ef69dcae49f50730d43a6535374a943c2a42e5dbfd97ed023cbefcc3b4bf751a4012c7a0638ed96fe6855a5cd5063fdc5d63dbc3b7938710937ce3f818169685919b4900d19106019b9e8948934fcc13fa7cc2dab0505baad59c6875246b8f139dd1014755abb2d9b67eba878486293b36eb12463cb3ae9498b9da344f0da20663571d6a6505e28a73caca9c16d71929d42cf4caa917a632ed72b356e59769972766141d2d885dc33e0682cee8312568f922809849b8a051c05c946957c3ab1256a5e314132c51871689df92caa5895c78239e98e6edc29088c6bea309e453641c32248205c664a65965ebeb5b635077ecc7e6696834344097e43d6d5c38950cdbede20bba5e1bf32ddd2fe824ef8778b50e02e5d7da730d67dc41f1a453cdfca41b15b9a707872bc406e13671d4f840b5fd6cabba686450e78a961a0c2d05e0a1e5a9668b1682b7c71b18c7a18e641ff89c3f86b46885e7bf7f98e124b0e152c428697af947572db9c227a0fa03a49c65fa908c0504d2fb928c409393a372da8071e853d1a30d515a2ab204568433cfdf6f54db8815e0ecd8e5abd94e42bb86d2193588cf90b8e2d10a18a30c67a9e9726edc32973aed09df28025948c5e1cbdcc2e4572d1d61207b3e75ccbf2bc188f128caf643f55fc4df7b72e3f651c9098cf54d6483aaae2ed10e56c4f5749cf3325ebacac8201cff536bbc4f1b803128e1b7949a438d312ba633af4946e8c0defe2c16844f9d7a1174ec6ce0625501986e644665ee561279e12226f4639c0a3616c0d28a1b474ff675dac7a92e5a5db20cb008322bce47cd51ba5858d3c6bf970163dd24e6aaa6811ad8138f3c65764389d54a798bcb995a2214a4c03bc8fd1ba5aa045712e64983ecb695ec506f1de4af3dab041aee74c980fcd925a9d37fc04e6c45afe768c3a0ce3e22ca1aed19c56b2860266c9e277c7b523e4f190a66a603a4e3f5d91b4b8e8f498f3d0e9b7b37ca83b621de5a04938889af86ef620118a6ef19110adba1f9ea4562c4da613224e01e833ffc268fd39faa1799cb1f8b9d3671cff67c39ed8b9194654c5c6f0bb469467bd84325e35af5d63a948040e92a4b625fee42e3eef1884a9cf70ce1fb2774d13039a0a12490ab448f2785eba179cc0cfd2d53a0f6ab30afd530d8b70026784b52d8508ffda96c51b6131c8ec23a89f3196066500eefb18f27b49168d39b84e37f9783029dc45e4ac0486ec3ee2b518cbb1253fed901366406592409c59136cb53ab6e9a021d9acdfd07b148bfc3d21bd9557c7f4f5c441706e552afb421b5e7d2c0b67a108acbe6f5c4588efd12619abf248ef285d6fc044363000a6d2ace6d2fed3d20490550a6ea8930b327e1326b0fcb36b145a72fd91d333a524c919a8f32eac4182cfc249c59b9490e21019434ea1b55ed0358b94b7355dc76a65db67bfa8f97351cbe95ba3771a406588e2335891313203fb272f83f736a620cb5fd3fb97cfba4145a3ffe075c22de7afc403fc7743ef075f41c1e3875895ef53e7f196180d801cfc7a98764daa575ba327533061af86d8f411518a0c1934da7b3f21e8d6cfda77bb52350d86ead5237c1b7ab67bf250d2402b0cb3b229d606c5c9f97f299787668ba236d6879f53e4fdc6209457ee2be9087e852671b620f0abc73da4df513b43c9116ac7feabc0246c595930cc96b5cfb3b52ef763229ced276e7ac143ae0284ca7eba0d48f2bfd2602c4d2c432c386b435bbe6834ae85e97d71edd7f2aa9ab7ac693f8feb706aa228afde03f1a5387b8fb3a476664a662d39c2a046b56b97d598ebaf79a9c60332caa029a61c3aad2c39c0824f7460d2f3e2301d957576d27c3b84c128f1ee57b8aa3a50650c448adadfeafa2c2e1bd54f35b0ad37fc3aabed4059e23a7f39504ec2ba03f0fedbab58d616c1ed3c149b12a1388f10b4940ebc875274fbd21028c77f31641fcd050dca8f3ffb057e550a889bc92f7e51860499ddf473ff2c10e4eea28599cc5464a6f11a959f89e31210554b817b4e1960ee057fcd99e65739a344994bf9d4ab44522a3fe203e6101438f9ddba9052a8fcc092159761327d4f617fa2403a2ce6829c929731bf1fa0888f19e5cce287e22dcd5944ef3a8fe4483981269e2e822eb99e907ceed9aee4166cadbd862d0b0e594640284e2201bbee3a3753526d928fa493f4455830e5a9aa6cd6dfb172287aef3f3e81442e2ae37f93500608e11a49e18a2cee3815955b971220d2532d7f114dc75a9c29af95c0bffee66978ff4fec5a0ae179d511179847a3b62a2979acea722c774231b938077c7923f5d4902042e79709e3b7d56c327931f426522dfcef8847526d8f2071c7ab3dba4d9fc6a7c1418d64db9ed8fb57c10037d5931cb1d9d480a36cb20cec343b6db47d9fb1ddfda038e216d058a6008c141e83ba34d0a386bb0d7c74f08ad0e638b51557710c44f8cf00bd214b145c545526489cbf64c36ee92734ce0746bff36c8ce006613a760e16d5d8c916ac460539e54964430dd36afd68a2e7b5d759a53ad80716b7f9a1c428faf65645862458dc62a6cd13b04191285e73ff6678d8697ccd022cddb654b25b829940ac62d8686811c1f4dfd3c4e49937952ec80106c6393ad0b0561f2449c8560d419f16df27ec37a809beb4ba8330a2cd284ebade9c7a6e5754cf96e6989e6637c4802d99d9705c54136a06961464d28da5dfc65b8931dc2e77b739407a62263c67bb4f8c9cfb726afad6c2e16d2ecebdbdd95834a810c2f2d9841a8c852d57b92e9f4900d04d0fec0caf66710b5cc0358bcc2bb72954934fe8da01d5b0504b4d78796ee0db6ed47f44d5c2924992acf5312077254043f8abe16814c8695f03bdd457eb59cf48b80e5c547b9a641395a371b06de6e94ad2304238ef5125943c4ba6cec5ec919e1793976860f662573e925888c3d585d77ea2e0f9fa33dd23c08f321e06016783629ae4b3c0e4210ca071d4d091ab12e98fb0f0760e8d637416256fdcad187274f6c1febb65786b8af0a430435b05195e408a169c4d584e7775fbfd0ef8644a72591fca7c4a8625d61faa66ee63ac2d2a7764362db3e82140520ba33a3b5d6daa04305cf7c88607d4ff50ecfd7c0e8b8264eb6a4ac31deb4ea7a3ce"]}, @generic="ec6c856f8db9fc70887266a7c67af343e37d2cf24e081540770af8fea4e81d7be57de4ca891c03beda6ee9401a1d95bb7345eb97041fad6e4bcd", @nested={0xc, 0x7f, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @fd=r5}]}]}, 0x1298}, {&(0x7f0000001e80)={0x248, 0x2c, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="79def96df46368fb1f2acefbf7e46a87801697e4f832f3f3fd49788acc17fdda473652524b7b0d79f75d2aa1658146eab667b3e17c050d9dc7dedf81adeb746176e761e1187585fd81d0fde1a8706057c9c7cb153eeb6b4409f1978158d680d3a5400197a87bb4877b1b124f5ee241ef02dda3fbc22b6da91e04464e8e1cd0f289b40e1946b68ebc026b072b1f343408a0008137d648", @typed={0x8, 0x68, 0x0, 0x0, @pid=r6}, @nested={0x197, 0x8c, 0x0, 0x1, [@typed={0x4, 0x56}, @generic="e86bf111e21fc617a0c6fa5614c25c74d670d10726ab5d79937cb53226cfda4f8d57b66766e78cc65880892aa9117a1af9c6f845c736f6ec725747805492255b24560282760e27c8", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x79, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@remote}, @generic="e7d1b985430cd008a3d775ff7bfb8a21eb7c7a3f8d4d2e6119b52d5bfb7dfbe786a426caa57e3fb1ecec4dae2c9ac50b3588c2d245a80d1de9bb74ddc4eb353093228d5c6a840278347508cabc777f28531d13373b972e64f4e2b1f4f56aaf9b540d26805e998079585b9dda9faa38225e6cac55b10ef7279d4a2cff247762ee8caed8", @generic="9186ce1de45f8bd690992858315d100d68400279b7529da2f7880bd3fa553422a7ab4750ec0baab1afae6e3113bf5a9428505bcd4b71e7f398537c184ef71fec66edd460678551989fb840bbb4f29eb6ed25e609a1ebb1b54b4211deffecc6775377fc8b5efa2047e77ffd53253fe6a6ecfd4f61056d35007d83e5eeda6094138b6c86adbc34febf8bde9b1cd455a1ab747fbb707a9dc096ad6a4d72064db7f3ea06084080a0fcbc0315d114"]}]}, 0x248}], 0x5, 0x0, 0x0, 0x4000}, 0x20080082)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:29 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000002501000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:29 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x3f800, 0x40000000, 0x10000101)

20:01:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0)
write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7)

20:01:29 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe0ff, 0x40000000, 0x10000101)

20:01:29 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000005c01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:30 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6, 0x0, 0x10000101)

20:01:30 executing program 0:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x340, 0x0)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x3, 0x7ff, 0x6, 0x4, 0xfff, 0xffffffffffffff61})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x20040)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0xfffffffffffffee9, 0x6, 0x0, {0x6, 0x1, 0x1d, 0x0, 'keQ\x97\xb6\xc02\xde\xf9\x83Yyringposix_acl_access*:em1-\r\x9d\x1cX\x92\x01\xccd\xc6-\xc2\xee\x9e6\x1f\xa8\x1b\x8c\xd2\t\xe5v\t\x80\x00\x00\x00\x00\x00\x00\x00\t7\xc5w\x00\x00\x90\xf4\xd6y\x14#\xfd\x8cB7\xac \xac\x95a\xae\x84B\xe4ZB\xca\xe2%\xebv\x14\xe4\xa3AH\xce<\xed\xac\xbd\x19\x1d\xc6\xf1\xa9=\xaa\x85`\xeb[\xfd\x1c\xb8\xd08\xe6tk\xb2\x97:\x9e\xd0\x1a\rwI\x9b\xe8c\xbe=\x85\xfda\xca!\x86\xf8\x88\xd5p_\xf9\x06{\x02\xd8\x17`F\xc4\xc3\x0eh$L\xf6\xad~%~E\xa8B\x9f\xbd\xc0me\x8bq/<\xfb\xf6'}}, 0x228)
socket$nl_route(0x10, 0x3, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:30 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x40000, 0x40000000, 0x10000101)

20:01:30 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xff01, 0x40000000, 0x10000101)

20:01:30 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d02000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:30 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x200084, 0x151)
r3 = syz_open_procfs(0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4c0)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r5, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r7, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r5, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r9 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r9, 0xe, &(0x7f0000000180)=""/169)
fallocate(r8, 0x0, 0x40000000, 0x10000101)

20:01:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
accept$unix(r1, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0xfffffffc)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r3, 0x0, 0x0)
r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x109000, 0x48)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000100)={0x800, 0x2})

20:01:31 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d03000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x5, @perf_config_ext={0x400}, 0x10001, 0x1, 0x20, 0x6, 0xff}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x73, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0xb3, 0x6, 0x2, 0x80, @tick=0x4, {0x4}, {0x3f, 0x8d}, @connect={{0x5, 0x8}, {0x7, 0x20}}}], 0x1c)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:31 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xff0f, 0x40000000, 0x10000101)

20:01:31 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x40800, 0x40000000, 0x10000101)

20:01:31 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:31 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x7, 0x0, 0x10000101)

20:01:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0xb1e46000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:31 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d04000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:32 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200018ee8bc84763, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x1, 0x8001})
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x95, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400410}, 0x2a3, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0203327025bd7000fcdb747c1882595536cd020000000007000000000800034000050000000003400000000808000440000000a2a796981c32a35676a52f95bd"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:32 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000280)=""/176)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:32 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xffe0, 0x40000000, 0x10000101)

20:01:32 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x8, 0x0, 0x10000101)

20:01:32 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x41000, 0x40000000, 0x10000101)

20:01:32 executing program 0:
socket$xdp(0x2c, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x1)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
getdents64(r2, &(0x7f0000000140)=""/11, 0xb)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

20:01:32 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d05000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:32 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x41800, 0x40000000, 0x10000101)

20:01:32 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x40000, 0x40000000, 0x10000101)

20:01:32 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140))
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x208c01, 0x0)
write$FUSE_LK(r2, &(0x7f0000000300)={0x28, 0x0, 0x3, {{0x8, 0x227, 0x1, r1}}}, 0x28)
r3 = semget(0x1, 0x4, 0x40)
r4 = semget$private(0x0, 0x3, 0x404)
semctl$IPC_RMID(r4, 0x3, 0x0)
semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f0000000240)=""/7)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x2, 0x7, 0x6, 0x0, 0x0, 0x7ea, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x88, 0x4, 0x3f, 0x8, 0x10001, 0x3ff, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0)

20:01:32 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
fanotify_mark(r4, 0x1, 0x20, r5, &(0x7f0000000000)='./bus\x00')
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000280)={0x80, 0x9, 0xfffffffa, 0x1ff, 0x1e3, 0xd6})
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="6f73782e6e65787065637400000000000000000000000000000000006a75d376dfec8285bdc4c6d8ee4280288df343945d5db4b2d7606c3a757eb861d78a0fcdcd471568625ece723345392c44ee657ccf266e8226f3b4401aace37cfb7412b984f129f38709dd6a17221acf93b8f3fe3fbb5fd684f877d89c55378b8942e48d91fcbcc38cb06d5508000000cc0152f256e421cdb4b92a012ff582911454e12e716fdd89ab07ab4f30dea96df09d2d70f32f04db4aafdd76caa9"], &(0x7f0000000400)=""/239, 0xef)
r8 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000180)=""/169)
fallocate(r7, 0x0, 0x40000000, 0x10000101)

20:01:32 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x9, 0x0, 0x10000101)

20:01:32 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d06000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2250.399077][   T27] kauditd_printk_skb: 55 callbacks suppressed
[ 2250.399095][   T27] audit: type=1800 audit(1578859293.013:602): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16678 res=0
[ 2250.507650][   T27] audit: type=1800 audit(1578859293.053:603): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16678 res=0
20:01:33 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x42000, 0x40000000, 0x10000101)

20:01:33 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x40800, 0x40000000, 0x10000101)

[ 2250.594657][   T27] audit: type=1800 audit(1578859293.183:604): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16677 res=0
20:01:33 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000380)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000440))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='s \x00@', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf25010000000000000008410000004c00180000800062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000180)=""/169)
fallocate(r7, 0x0, 0x40000000, 0x10000101)

[ 2250.709048][   T27] audit: type=1800 audit(1578859293.183:605): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16677 res=0
20:01:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8a0041, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x400, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='erspan0\x00', 0x0, 0x8, 0x7})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x28, 0x1, r1})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2250.812017][   T27] audit: type=1800 audit(1578859293.193:606): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16677 res=0
20:01:33 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d08000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2250.918041][   T27] audit: type=1800 audit(1578859293.483:607): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16584 res=0
20:01:33 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x42800, 0x40000000, 0x10000101)

20:01:33 executing program 0:
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc7b95640d5bde521, &(0x7f0000000240)={[{@nfs_export_on='nfs_export=on'}, {@nfs_export_off='nfs_export=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_off='index=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}, {@xino_auto='xino=auto'}], [{@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user', 0x3d, '!(GPLwlan1$'}}, {@appraise_type='appraise_type=imasig'}]})
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2aa18}, r0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2251.026448][   T27] audit: type=1800 audit(1578859293.483:608): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16584 res=0
[ 2251.124382][   T27] audit: type=1800 audit(1578859293.693:609): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16727 res=0
20:01:33 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x41000, 0x40000000, 0x10000101)

[ 2251.184887][   T27] audit: type=1800 audit(1578859293.693:610): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16727 res=0
20:01:33 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xa, 0x0, 0x10000101)

20:01:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xe00, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x10b, 0x0, 0x3, "58647012ea38a8dc2042643d3106d689", "69f96dc1a851b146ecd0610ca2ac2f5d9b58c8b32ba84077fc797de7338a08f0fe97ba06dbfd46a83f91a256a8d97f2033f91d1875d0544fdde8f4ff6a15b040742fc3926f7810c759599fc8a7383090798b0c8b1324f4f5c2f9639ce619f872af7ebe4ccd72087ea4e6dff63cef799b34bc8b98a1621d0ef98529606facea63b5db2dff9f6f739141d23ae4437a4c1a6c77a39544ddab5a4fc0cf7021cad11fe7189c981a0110a6cb31d2a757edee972875841fa94c77054193ed8ddb98114ea6275671b3b3282f85d2da1a6ce91b24c174aba905b959d26530c428d2a06eb395c0cee70727a8e5c3cc0a426524b09a9df4cdbc9480"}, 0x10b, 0x27008c3896ccb3db)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000))

20:01:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x105000)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x7, {0x477, 0x3, 0x7fff, 0x505f}})

20:01:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xa00000, 0xd9, 0x28621f91, <r2=>r1, 0x0, &(0x7f00000000c0)={0xd60d9d, 0x40, [], @p_u16=&(0x7f0000000000)=0x2}})
ioctl$USBDEVFS_RESET(r2, 0x5514)
fcntl$setstatus(r0, 0x4, 0x42000)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x40000000, 0x3, {0x0, 0x7530}, {0x0, 0x2, 0x52, 0x5, 0x80, 0x8, "03998cd3"}, 0xff, 0x3, @userptr=0x4, 0x10000})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2251.430777][   T27] audit: type=1800 audit(1578859293.693:611): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16727 res=0
20:01:34 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x7f}, 0x4)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r6, &(0x7f00000017c0), 0x73, 0x0)
fallocate(r6, 0xa0, 0x40000000, 0x10000101)

20:01:34 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d0a000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:34 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r2=>r0, r1, 0x0, 0x8, &(0x7f0000000000)='trusted\x00'}, 0x30)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
r5 = fcntl$dupfd(r3, 0x406, r4)
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000240)={0x1, 0xf, [@remote, @random="9a23c8fc7936", @empty, @link_local, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @random="b5dde20c13a4", @dev={[], 0x1c}, @remote, @local, @broadcast, @dev={[], 0x19}, @dev={[], 0x2b}, @broadcast]})
ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000100))
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r6, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:34 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x43000, 0x40000000, 0x10000101)

20:01:34 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xc, 0x0, 0x10000101)

20:01:34 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d0b000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:34 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x41800, 0x40000000, 0x10000101)

20:01:34 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x43800, 0x40000000, 0x10000101)

20:01:34 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:35 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d0f000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:35 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x44000, 0x40000000, 0x10000101)

20:01:35 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x42000, 0x40000000, 0x10000101)

20:01:35 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xd, 0x0, 0x10000101)

20:01:35 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d10000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x301}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr="6dbf043d71dc4a52d31836e64c68de2a"}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1bc, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x437}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0xc}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf8000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc9b}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf44}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf92}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

20:01:35 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x1000, 0x10000})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:35 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x44800, 0x40000000, 0x10000101)

20:01:35 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d14000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000))

20:01:36 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x45000, 0x40000000, 0x10000101)

20:01:36 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x42800, 0x40000000, 0x10000101)

20:01:36 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)

20:01:36 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x10, 0x0, 0x10000101)

20:01:36 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d3b000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:36 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x45800, 0x40000000, 0x10000101)

20:01:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xfffffffa, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
r3 = fcntl$dupfd(r0, 0x0, r1)
r4 = creat(0x0, 0x0)
lseek(r4, 0x0, 0x2)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={<r5=>0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r5, @loopback, @remote}, 0xc)
bind$packet(r4, &(0x7f0000000000)={0x11, 0xc, r5, 0x1, 0x6}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfdb0d4a88aebc21}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x470, 0x2c, 0x6d7f53f8f0f4a3c, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0x1d}, {0x0, 0x5}, {0x10, 0x11}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x438, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x84}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x90}, @TCA_ROUTE4_IIF={0x14, 0x4, 'veth0_to_bridge\x00'}, @TCA_ROUTE4_POLICE={0x408, 0x5, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3fa, 0x80, 0x2, 0x10000, 0x7fff, 0x1, 0x2, 0xc0000000, 0x7, 0x40, 0x9, 0x9, 0x1, 0x3, 0x7ff, 0x1, 0xc2d2, 0x6, 0x3, 0xffffffff, 0x400, 0x64, 0x8, 0xffffff2c, 0x7, 0x4e4, 0xc2, 0x0, 0x8f8d, 0x304, 0x1, 0xfffffff7, 0x9, 0x400, 0xbbf4, 0x7, 0x10001, 0xeef, 0x3, 0x8c15, 0x7fffffff, 0x2, 0xfb, 0x81, 0x7, 0x964, 0x1, 0x5, 0xf86, 0x1, 0x8, 0x7, 0x0, 0x0, 0x81, 0x7, 0x0, 0x20, 0x9, 0x9, 0x9, 0x8, 0x44a, 0xb57, 0x7ff, 0x40, 0x2, 0x4f8b, 0x2394, 0x1, 0x7fff, 0x10000, 0x1, 0x80000000, 0x5, 0x6, 0x6, 0x3, 0x8001, 0x5, 0x7, 0x80000001, 0x8, 0x1ff, 0x400, 0x81, 0x10000, 0x4, 0x9, 0x7ff, 0x7, 0x4, 0x8, 0x44f, 0x4, 0x10001, 0x9, 0x1045, 0x0, 0x0, 0x90bc, 0x3f, 0x1, 0x401, 0x7, 0x7f, 0x5, 0x40, 0x800, 0x0, 0xbe, 0x4, 0x758b, 0x2, 0x145, 0x6, 0x4, 0xffffff7f, 0x7fffffff, 0x0, 0xffffcffb, 0xf00, 0x5, 0x80, 0xffffff7f, 0x7f, 0x3, 0x9, 0xfffffffd, 0x2, 0x101, 0x200, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x401, 0x6, 0x40, 0x184, 0xc01, 0x46, 0xc85, 0x1, 0x10000, 0x8, 0x7, 0x101, 0x401, 0xfffffe54, 0x80000001, 0xfffeffff, 0x80, 0x0, 0x2, 0x2, 0x4, 0x3e, 0x3f, 0x4, 0x6, 0x5, 0x9, 0x3, 0x1, 0x2e3c, 0x33ba, 0x80000000, 0x6, 0x9, 0x1f, 0x4c5c, 0x6, 0x85, 0x100, 0x1, 0x9, 0x5, 0x2, 0x8001, 0x7, 0x7, 0x5, 0x10, 0x8000, 0x5, 0x8, 0x841, 0x5, 0x9217, 0x81, 0x7, 0x1, 0x2, 0xbbc, 0x8, 0x2, 0x7, 0x100, 0xfffffff9, 0x1, 0x346, 0x6, 0x95b6, 0x8000, 0x1, 0x1, 0x2, 0x1, 0x2, 0x400, 0xc883, 0x7f, 0x3ff, 0x81, 0x10000, 0x6, 0x6651, 0xc35a, 0xbf, 0x3, 0x6, 0x7, 0xe0, 0x6, 0x33f, 0x1b, 0x0, 0x7, 0x80000001, 0x1793, 0x7fffffff, 0x0, 0x7, 0xffffff4a, 0x0, 0x1, 0xb30, 0xfffffe00, 0x3f, 0x4, 0x1, 0x1, 0x2, 0x1, 0x4, 0x7, 0x8, 0x800, 0x2f4, 0x6716d971, 0x3, 0x4, 0x7]}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x1ffd5}}]}}]}, 0x470}}, 0x8000)
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000000c0)={0x2, 0x4d, "f320423a4064c13fe01b1f88f598019fc9de8911d69725d237df19592261764914547e08cbcf4c0fb838422f6c5f4470b0b5e4e51b0b92cf00648a0671730fe681e407fa70a92f6148f2a3f1cd"})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:36 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x43000, 0x40000000, 0x10000101)

20:01:36 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x2400)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x27e}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000540)=0x1, 0x4)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)=[&(0x7f0000000280)=')md5sumGPLmd5sum\\-md5sum,}\x00', &(0x7f00000002c0)='bdevmd5sum#\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='!mime_type\x00', &(0x7f00000003c0)='GPLcgroup&-system\'Z\x00', &(0x7f0000000400)='em0/&em1\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='wproc%\x00', &(0x7f00000004c0)='bdev&\x00'])
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:36 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x46000, 0x40000000, 0x10000101)

20:01:36 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d00030000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:37 executing program 0:
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
syz_open_dev$admmidi(0x0, 0x0, 0x0)
ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000580))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f000003e000)='\'', 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={<r3=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="5700000081a3a51b1c30e8f0ae2ede5285251f147fb8d227c9ef569fb3c792426fda754ac767ba8235836bc208fd99c740002967a3a6af25b0110dd1220ccae8abc46820ecabca1e1ba165993cba605bd1b57afc02d1"], 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r3, 0x84, "83bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc7b9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a"}, &(0x7f0000000080)=0x8c)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
fchdir(r4)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r5 = memfd_create(&(0x7f000003e000)='\'', 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000280))
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x100)
r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r8, &(0x7f00000017c0), 0x73, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
accept$unix(r0, 0x0, 0x0)

20:01:37 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x12, 0x0, 0x10000101)

20:01:37 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000000)={0x1, 0x8})
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x6, 0xfffffff9, "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", 0x7, 0x2, 0xae, 0x7, 0x1, 0x0, 0x6, 0x1}}}, 0x120)
r7 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd)
r8 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r8, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000540)=""/113)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f2")
keyctl$invalidate(0x15, r7)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:37 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x43800, 0x40000000, 0x10000101)

20:01:37 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x46800, 0x40000000, 0x10000101)

20:01:37 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d00960000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000240)={0x45, 0x0, 0x502a, 0x2, 0xffff, 0x14b, 0x6})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:37 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x47000, 0x40000000, 0x10000101)

20:01:37 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe0, 0x0, 0x10000101)

[ 2255.432890][   T27] kauditd_printk_skb: 69 callbacks suppressed
[ 2255.432911][   T27] audit: type=1800 audit(1578859298.053:681): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16724 res=0
20:01:38 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x44000, 0x40000000, 0x10000101)

20:01:38 executing program 0:
r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
fcntl$getflags(r1, 0x408)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:38 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d00970000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2255.653566][   T27] audit: type=1800 audit(1578859298.133:682): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16724 res=0
20:01:38 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r4 = socket$inet(0x2, 0x3, 0x800000800000001)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_virt_wifi\x00', &(0x7f0000000100)=@ethtool_flash={0xa, 0x0, "9174ea4714c0dc3243f046e0907a3aac947f797b9da89c16446bcadb474a2203cf8cd2b5ed48bf6a47f8694ecbe2bc0e31efd13630e66664cda8348bd127409dfca374f50642528e5ce8db930f63c926e84b5d4fc7360951c2a753be28803b7da762b50eb43f9c8ae2acaecaeb690198b6bdd458fa9b5abb6ccf6a0fb058c0c1"}})
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

[ 2255.703128][   T27] audit: type=1800 audit(1578859298.143:683): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16724 res=0
[ 2255.756334][   T27] audit: type=1800 audit(1578859298.353:684): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17037 res=0
20:01:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeac, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, 0x5)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101400, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0))
r2 = msgget(0x3, 0x0)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000240)=""/186)

20:01:38 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x47800, 0x40000000, 0x10000101)

20:01:38 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x44800, 0x40000000, 0x10000101)

[ 2255.942438][   T27] audit: type=1800 audit(1578859298.353:685): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17037 res=0
20:01:38 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x184, 0x0, 0x10000101)

20:01:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@default, @bcast})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x7)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2256.012929][   T27] audit: type=1800 audit(1578859298.423:686): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17050 res=0
[ 2256.049910][   T27] audit: type=1800 audit(1578859298.423:687): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17050 res=0
20:01:38 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0})
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
accept$unix(r1, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
fcntl$setstatus(r3, 0x4, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:38 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d00ff0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2256.207749][   T27] audit: type=1800 audit(1578859298.433:688): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17050 res=0
[ 2256.332925][   T27] audit: type=1800 audit(1578859298.563:689): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17038 res=0
[ 2256.427417][   T27] audit: type=1800 audit(1578859298.563:690): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17038 res=0
20:01:39 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000002c0)={0x77359400}, 0x10)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
r2 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, 0x0)
r4 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, 0x0)
setresuid(0x0, r5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, <r6=>0x0}, &(0x7f0000000280)=0xc)
setresuid(r3, 0xee01, r6)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r7, &(0x7f00000017c0), 0x73, 0x0)
fsetxattr$security_capability(r7, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x1}, {0xf833, 0x6}], r3}, 0x18, 0x6)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0)
unlinkat(r8, &(0x7f00000000c0)='./file0\x00', 0x92b190fc449520a3)
ftruncate(r0, 0x2)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0)

20:01:39 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x45000, 0x40000000, 0x10000101)

20:01:39 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x68001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000640))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28)
r6 = socket(0x10, 0x8000000803, 0x0)
write(r6, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a)
socket$inet(0x2, 0x80001, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
r8 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r8, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r9, &(0x7f00000017c0), 0x73, 0x0)
preadv(r9, &(0x7f0000000340), 0xf1, 0xfffffffffffffffe)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={<r10=>0x0}, &(0x7f0000000600)=0x2117361df333285c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r10, @ANYBLOB="00000100b112cff4b738ed285ed2a998640ffbd93a17ef8737d669a6c257fb9e613a810f4741cf374b77310adc70aad2567f0d"], 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e23, 0x3f, @empty}}, 0x6, 0x401}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x8}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYBLOB="8000000003562bd729bf6ebb99bd38c68f7ea1d9a114c618497be57d0b9adf1a40990b90641ad1d823758f1f23a4bd8ac73cf9bf19f10e91dd2e95e778acf4d6e43aeaa14d615e64ff6ef5ca70c9b7d3626742233ca3667474ddef1e3ed2d95fe369454d84456f2a7ed78307fa9171b20be9ae0b6d4ba4f7f800"/132], &(0x7f0000000440)=0x88)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x412001, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r12 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r13 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r13, 0xe, &(0x7f0000000180)=""/169)
fallocate(r12, 0x0, 0x40000000, 0x10000101)
r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x8000, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r14, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x27)

20:01:39 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x48000, 0x40000000, 0x10000101)

20:01:39 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004df9ffff7f000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.current\x00', 0x0, 0x0)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000600)={0x20, 0x60, &(0x7f0000000500)="234dda50d20f2db40660ab280d462d9efca769a8dd6e85d13aa1e8c210839ec22820340192f8ef4b70b6c8c1e3065211179b3a69e593787666225e93bf414e29490e3e7b023a91f83bcaead98df64d23e73d336b6345253b7efc045f617fb35dd858e071b6219da9f9689206a615ea39263f51eca35de76379f5bc59559ba57bcedfd0d12809706dde863fba55685cd3c47ff4ae2378def958737b96d28a9993797f07b3264f92deb819a582d1700d3ee127664b16ac8e1ea949b5506ada8b55cac29c897039b8e5fdfd5be6856eea218f1cb9e0f77822ff8404e948cca1af3a948057542721725a017c3fab5207fc", {0x7f, 0xb14, 0x38414761, 0x6, 0x1, 0xfffffffb, 0xc, 0x6}})
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x452, 0x7b0a7d0b394e5b2b)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000440)={0x1, r3, 0x1})
connect(r1, &(0x7f0000000240)=@generic={0x26, "d6ae1f7d8125ca8cc06b6c7da022343693e7319a0c86ba877939d2183fc0350f8a37d13c8712b2e83acec6bab0085f28a6df58ba62c08f0eb88f5d116bd1d623509e3f5d07dc47d794e0efd8a879ff621400efbc77531c34f2fb138ba5835576f1643d282b56a8273bb4639412db894dd9a6e5d0d115ee2e32fe7764509c"}, 0x80)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0xa2, 0x0, 0x0, 0x0, 0x1, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x80, &(0x7f00000002c0)={0x0, 0xe, 0x3, 0x5, 0x31e}, 0x8, 0x1f, 0x7fff, 0x0, 0x0, 0x9, &(0x7f0000000300)="007bbd3a6a28f08981211fdd2efba3d0ca1a28aac3a67cd2b17edcdd01f911b1931dd4615611e09d3eed25956c0b13b2f11cbb893888f34902420edf9096f6fe1a694319e00e"})
openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/cgroups\x00', 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000000c0)={0x9, 0x9, 0x4, {0xfffffff9, 0x7fff}, 0x6, 0x9})

20:01:39 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x300, 0x0, 0x10000101)

20:01:39 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000000)=0x54)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/152)

20:01:39 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x45800, 0x40000000, 0x10000101)

20:01:40 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d1820ceaa8088ffff0000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:40 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @sco={0x1f, {0xf0, 0x0, 0x9, 0xff, 0x7f, 0x4}}, @isdn={0x22, 0x9, 0x0, 0x9, 0x50}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000010}, 0x401, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000000)='veth1_vlan\x00', 0xfffffffffffffffd, 0x3, 0x401})
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}}, 0x2ea)
linkat(r2, &(0x7f0000000300)='./bus\x00', r0, &(0x7f0000000340)='./file0\x00', 0x200)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:40 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x48800, 0x40000000, 0x10000101)

20:01:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x15cc2ab177ede71b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:40 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x500, 0x0, 0x10000101)

20:01:40 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x46000, 0x40000000, 0x10000101)

20:01:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:40 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d1822ceaa8088ffff0000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:40 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x7}, 0x1c)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(0xffffffffffffffff, 0x0, 0xb8ee, 0x10000101)

20:01:41 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x66800, 0x40000000, 0x10000101)

20:01:41 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x49000, 0x40000000, 0x10000101)

20:01:41 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004dffffffffffffffff0000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:41 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x600, 0x0, 0x10000101)

20:01:41 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = pkey_alloc(0x0, 0x0)
pkey_free(r4)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280), 0x400)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:41 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x49800, 0x40000000, 0x10000101)

20:01:41 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x67000, 0x40000000, 0x10000101)

20:01:42 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01020000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:42 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4a000, 0x40000000, 0x10000101)

20:01:42 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x208840, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$TCGETX(r4, 0x5432, &(0x7f0000000000))
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:42 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x700, 0x0, 0x10000101)

20:01:42 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x67800, 0x40000000, 0x10000101)

20:01:42 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01030000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:42 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4d000, 0x40000000, 0x10000101)

20:01:43 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01040000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:43 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x68000, 0x40000000, 0x10000101)

[ 2260.514173][   T27] kauditd_printk_skb: 61 callbacks suppressed
[ 2260.514193][   T27] audit: type=1800 audit(1578859303.133:752): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16727 res=0
[ 2260.540339][   T27] audit: type=1800 audit(1578859303.163:753): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16727 res=0
[ 2260.560297][   T27] audit: type=1800 audit(1578859303.163:754): pid=9740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16727 res=0
[ 2260.650698][   T27] audit: type=1800 audit(1578859303.273:755): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16728 res=0
[ 2260.696162][   T27] audit: type=1800 audit(1578859303.293:756): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16728 res=0
[ 2260.763409][   T27] audit: type=1800 audit(1578859303.293:757): pid=9747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16728 res=0
20:01:43 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8c50f56c54163a1a32d855a6c5f1a16704f5061bc510ac1e4291edde4aa557e776bce411a3e35df1cbf2aaf3ef7ef1641e182bf5eda71d55d7ec03215717e802645900e95c5a6b6527554a974da6b4f3bc4d89752273dedd176e1b37e8f1ac039287e823a947eab3e4bc51c5f7a9cda7a3fd2d1afe4b4351c4d3da6e4350e3e528ea32007974484459e9d6048f12f3e2ce6376f3ada82cbb78671b2321f8ea558e18db4207207b9ef1ecda77492b6becf83fc749a673a8ae5f1bb76a84752564148f0a8061aae77a7cb8e67c405b289ba1547d08190f8bde9e2b6b8a6515c8cca059b2a612c0a4", 0xe7, 0x20}], 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d7265636f7665722c756d61736b3d30303030303030303030303030303030303030303030322c736d61636b66736861743da12c7065726d69745f646972656374696f2c6d6561737572652c6d61736b3d5e4d41595f455845432c00"])
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:43 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x900, 0x0, 0x10000101)

20:01:43 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01050000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2261.050030][   T27] audit: type=1800 audit(1578859303.673:758): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0
[ 2261.164770][   T27] audit: type=1800 audit(1578859303.673:759): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0
20:01:43 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4d800, 0x40000000, 0x10000101)

[ 2261.235769][   T27] audit: type=1800 audit(1578859303.783:760): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17064 res=0
[ 2261.262961][   T27] audit: type=1800 audit(1578859303.783:761): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17064 res=0
20:01:44 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x68800, 0x40000000, 0x10000101)

20:01:44 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xa00, 0x0, 0x10000101)

20:01:44 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4e000, 0x40000000, 0x10000101)

20:01:44 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01060000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:44 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x2400)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'bdevppp0em0{cgroupvboxnet0]posix_acl_accessem0'}], 0xa, "6bcaacc61edb68e740b363019130ff6507c718a49f3b7076e2c62ca27a28183acf0d71f12f021febdf03fb7781fd400d880b0ea7e92dba06436959af1a4bc0e53fb4de2488e7f5f30d56ac6bfb551c0880bbc39dd394e3bb53893fd29fe1b19ae68a2a90ec7e68b25a8dfd2b"}, 0xa6)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:01:44 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x69000, 0x40000000, 0x10000101)

20:01:44 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4e800, 0x40000000, 0x10000101)

20:01:44 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01070000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
r3 = dup2(r1, r2)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x1}}, 0x400d800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000040}, 0xfffffffffffffedc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r4, 0x66ae8a9de61db0d5, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x0, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x4009}, 0x93)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:44 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4f000, 0x40000000, 0x10000101)

20:01:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x7, 0x2, 0x5}})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x10000)

20:01:45 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xc00, 0x0, 0x10000101)

20:01:45 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$KDDISABIO(r4, 0x4b37)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r5 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='cpuseteth0{\x00', 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000300)={r5, 0xfe, 0x77}, 0x0, &(0x7f0000000340)="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", &(0x7f0000000440)=""/119)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:01:45 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x69800, 0x40000000, 0x10000101)

20:01:45 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x4f800, 0x40000000, 0x10000101)

20:01:45 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01080000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x34308}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/175)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000240)={0x49, 0x1f, 0x81, 0x3, 0x1})

20:01:45 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01090000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:45 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6a000, 0x40000000, 0x10000101)

20:01:45 executing program 4:
r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000))
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:45 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x50000, 0x40000000, 0x10000101)

20:01:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:46 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xd00, 0x0, 0x10000101)

20:01:46 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d010a0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getegid()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x5b1001, 0x0)
ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0xfffffff9, 0x3, 0x2, 0x203})
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:46 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6a800, 0x40000000, 0x10000101)

20:01:46 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x50800, 0x40000000, 0x10000101)

20:01:46 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
fcntl$setlease(r3, 0x400, 0x0)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:46 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x1200, 0x0, 0x10000101)

20:01:46 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d010c0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r1, 0x0, 0x0)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="b155457b669ef051d1f42751272b40d1febf38cadc595dc5677d57a351505d5e08ee472dc174cb5b6aea0872a76c276cd69bb6b20edbe4c3d1cfb6546789889150874ca635f15de6e53bf0b03fed959cf172395c8088558ebcff0fda4b63afcff8626143281299c7e896aca9ffce417e5e5d7c5b626b0876803419beb187d2a453417dff2bdefa844573a2a08c4ced2fbad8a0d539c027e0caeb38058e4cb0a5a2442f9b607069dccd88e0a90676222d3ace092662887959ad651c985e9b0eb34b81bb62fb519151534e", 0xca}], 0x1, 0x80)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:46 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x69c85, 0x40000000, 0x10000101)

20:01:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="35e7f1e1b496991a66c679561047eef9679a9d4141c833d5ddaf6def54000349ebcc14a6cad14976f917b128a0b9bbbeadea30d4347c08dba76127d77717ae6101e69791395b07395b0eb907a5eac529c48299e164889fc5a7bac5866a36499146c3613da82f9d68e11ed66753b1a566b9ac346d8cd7cf01db20156bb93401553b2597bfd319b1a8b86b46cd3cfcbd47798c4ba8bc98bc19758c2d2610923cfa20464fdd0924edf6ec354c8bdb8bdd348a1a1a407923badf93518b96792f9a4880d17a217d03c2", 0xc7}], 0x2, &(0x7f0000001340)=[{0x30, 0x117, 0x400, "ae3a60b32240379af1582c0b9deb4b4c4f13d021437e2b28f7172952"}, {0x110, 0x118, 0x8001, "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"}, {0x20, 0x105, 0x6, "0d56881d765d62abb5720e473416c9"}], 0x160}, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:47 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6b000, 0x40000000, 0x10000101)

20:01:47 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01100000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:47 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:47 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x80000, 0x40000000, 0x10000101)

20:01:47 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01230000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:47 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:47 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x2000, 0x0, 0x10000101)

20:01:47 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6b800, 0x40000000, 0x10000101)

20:01:47 executing program 0:
r0 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r3, 0x0, 0x0)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000001640)=""/137)
clone3(&(0x7f0000001540)={0x18000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r4=>0x0, {0x1d}, &(0x7f0000000340)=""/120, 0x78, &(0x7f0000001400)=""/200, &(0x7f0000001500)=[0x0, 0x0, 0x0], 0x3}, 0x50)
r5 = memfd_create(&(0x7f00000015c0)='net/nf_conntrack_expect\x00', 0x4)
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r6, &(0x7f00000017c0), 0x73, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r7, &(0x7f00000017c0), 0x73, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r5, &(0x7f0000001600)={r6, r7, 0x36a})
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0)
write$P9_RAUTH(r3, &(0x7f0000001700)={0x14, 0x67, 0x2, {0x24, 0x1, 0x3}}, 0x14)
r8 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r8, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f00000000c0)={<r9=>0x0, <r10=>0x0})
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000240)=0x4)
fgetxattr(r8, &(0x7f0000000100)=@random={'system.', 'net/nf_conntrack_expect\x00'}, &(0x7f0000000400)=""/4096, 0x1000)
ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000040)={0x6, 0x60ea47124d2b2d96, 0xffffffffffffffa9, 0x40000000, 0x7, {r9, r10/1000+30000}, {0x1, 0x8, 0x3, 0xb0, 0x8, 0xff, "0000f006"}, 0x10000020, 0x1, @fd, 0x80, 0x0, <r12=>0xffffffffffffffff})
fcntl$setstatus(r12, 0x4, 0x20000)
socket$inet6(0xa, 0x6, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:47 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01480000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2265.308001][T10005] sctp: [Deprecated]: syz-executor.0 (pid 10005) Use of int in max_burst socket option.
[ 2265.308001][T10005] Use struct sctp_assoc_value instead
20:01:48 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x80400, 0x40000000, 0x10000101)

[ 2265.438761][T10005] sctp: [Deprecated]: syz-executor.0 (pid 10005) Use of int in max_burst socket option.
[ 2265.438761][T10005] Use struct sctp_assoc_value instead
20:01:48 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x3f00, 0x0, 0x10000101)

20:01:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x7, 0x3, <r1=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0a77, 0x6, [], @p_u32}})
write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x10, 0xfffffffffffffff5, 0x7}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x73, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

[ 2265.606819][   T27] kauditd_printk_skb: 70 callbacks suppressed
[ 2265.606835][   T27] audit: type=1800 audit(1578859308.223:832): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16584 res=0
20:01:48 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x80500, 0x40000000, 0x10000101)

[ 2265.768607][   T27] audit: type=1800 audit(1578859308.263:833): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16612 res=0
20:01:48 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes256, 0x8, "4a24f4823965ae50"})
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:48 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x6c000, 0x40000000, 0x10000101)

20:01:48 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d014c0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2265.905339][   T27] audit: type=1800 audit(1578859308.263:834): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16612 res=0
20:01:48 executing program 0:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x50000, 0x40000000, 0x10000101)

[ 2266.028703][   T27] audit: type=1800 audit(1578859308.263:835): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16583 res=0
[ 2266.137021][   T27] audit: type=1800 audit(1578859308.263:836): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16583 res=0
20:01:48 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x100400, 0x40000000, 0x10000101)

[ 2266.356871][   T27] audit: type=1800 audit(1578859308.263:837): pid=10024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16583 res=0
20:01:49 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x8401, 0x0, 0x10000101)

20:01:49 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x180400, 0x40000000, 0x10000101)

20:01:49 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x80000, 0x40000000, 0x10000101)

[ 2266.491587][   T27] audit: type=1800 audit(1578859308.273:838): pid=10015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16584 res=0
[ 2266.528273][   T27] audit: type=1800 audit(1578859308.273:839): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16584 res=0
20:01:49 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01680000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2266.610610][   T27] audit: type=1800 audit(1578859308.733:840): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16609 res=0
20:01:49 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000000)=0x8)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

[ 2266.706468][   T27] audit: type=1800 audit(1578859308.733:841): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16609 res=0
20:01:49 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x200400, 0x40000000, 0x10000101)

20:01:49 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes256, 0x8, "4a24f4823965ae50"})
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:49 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d016c0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:49 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x80400, 0x40000000, 0x10000101)

20:01:50 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xe0ff, 0x0, 0x10000101)

20:01:50 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x280400, 0x40000000, 0x10000101)

20:01:50 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
r7 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
write$P9_RSTATu(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="670000007d010000004500070001000100020100000001000000000000000000008080000000020000000800000000000000000001005e0b00265e70726f632a7070703106007d776c616e310d0073656375726974792a757365726488fc67a007d085c970fd91ac3a3d3723f1a1343fc8839ca6170da463290676cdd52e70c9db8b0d2124b0cf4d638a29d9fe43c48429d7e4ceff70e019ba3ee4abacac24b33a064cf986267098ac3a97468643923adfeafeb447b72c11822e642bf9e360e1c2fbb771a8d4523840ff9875aa484eb70f2bea7050a964af3dd4dac0ef62c8096a69", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x67)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x10000101)

20:01:50 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x8401, 0x0, 0x10000101)

20:01:50 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01740000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:50 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xff01, 0x0, 0x10000101)

20:01:50 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xa6000, 0x40000000, 0x10000101)

20:01:50 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x300400, 0x40000000, 0x10000101)

20:01:51 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x80400, 0x40000000, 0x10000101)

20:01:51 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d017a0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:51 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xff0f, 0x0, 0x10000101)

20:01:51 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x380400, 0x40000000, 0x10000101)

20:01:51 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x142, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7, 0x7b, 0x1}, 0x7)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:51 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x100400, 0x40000000, 0x10000101)

20:01:51 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01de0000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:51 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
r7 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
write$P9_RSTATu(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="670000007d010000004500070001000100020100000001000000000000000000008080000000020000000800000000000000000001005e0b00265e70726f632a7070703106007d776c616e310d0073656375726974792a757365726488fc67a007d085c970fd91ac3a3d3723f1a1343fc8839ca6170da463290676cdd52e70c9db8b0d2124b0cf4d638a29d9fe43c48429d7e4ceff70e019ba3ee4abacac24b33a064cf986267098ac3a97468643923adfeafeb447b72c11822e642bf9e360e1c2fbb771a8d4523840ff9875aa484eb70f2bea7050a964af3dd4dac0ef62c8096a69", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x67)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x10000101)

20:01:51 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xffe0, 0x0, 0x10000101)

20:01:51 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x400400, 0x40000000, 0x10000101)

20:01:52 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000000)=""/28)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:52 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000300000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:52 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x180400, 0x40000000, 0x10000101)

20:01:52 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
r7 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
write$P9_RSTATu(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="670000007d010000004500070001000100020100000001000000000000000000008080000000020000000800000000000000000001005e0b00265e70726f632a7070703106007d776c616e310d0073656375726974792a757365726488fc67a007d085c970fd91ac3a3d3723f1a1343fc8839ca6170da463290676cdd52e70c9db8b0d2124b0cf4d638a29d9fe43c48429d7e4ceff70e019ba3ee4abacac24b33a064cf986267098ac3a97468643923adfeafeb447b72c11822e642bf9e360e1c2fbb771a8d4523840ff9875aa484eb70f2bea7050a964af3dd4dac0ef62c8096a69", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x67)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x10000101)

20:01:52 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000500000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:52 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x480400, 0x40000000, 0x10000101)

20:01:52 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x30000, 0x0, 0x10000101)

20:01:52 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x200400, 0x40000000, 0x10000101)

20:01:52 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x214900, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/169)
fallocate(r3, 0x0, 0x40000000, 0x10000101)

20:01:53 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000600000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:53 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x280400, 0x40000000, 0x10000101)

20:01:53 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x500400, 0x40000000, 0x10000101)

20:01:53 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x30001, 0x0, 0x10000101)

20:01:53 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x5)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:53 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x142, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
write$P9_RREMOVE(r4, &(0x7f0000000280)={0x7, 0x7b, 0x1}, 0x7)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:53 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000700000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2271.039763][   T27] kauditd_printk_skb: 76 callbacks suppressed
[ 2271.039823][   T27] audit: type=1800 audit(1578859313.663:918): pid=10291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16527 res=0
[ 2271.174982][   T27] audit: type=1800 audit(1578859313.693:919): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16527 res=0
20:01:53 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x300400, 0x40000000, 0x10000101)

20:01:53 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x580400, 0x40000000, 0x10000101)

20:01:54 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0xff0f, 0x0, 0x10000101)

[ 2271.341596][   T27] audit: type=1800 audit(1578859313.693:920): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16527 res=0
20:01:54 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x30800, 0x0, 0x10000101)

[ 2271.551328][   T27] audit: type=1800 audit(1578859313.733:921): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16534 res=0
20:01:54 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x600400, 0x40000000, 0x10000101)

20:01:54 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000900000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2271.686862][   T27] audit: type=1800 audit(1578859313.763:922): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16534 res=0
20:01:54 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
shutdown(r4, 0x1)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x3, 0x3, 0x7, 'syz0\x00', 0x4}, 0x0, [0x5, 0xb49, 0x10001, 0x7fff, 0x9b1, 0xfff, 0x4, 0x3, 0x3, 0x80, 0x0, 0x9, 0xa9, 0x7f, 0x7, 0x5, 0x2, 0x5, 0x9, 0xfffffffffffffff7, 0xa1, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x6b0d5257, 0x8, 0x2, 0x200000000000, 0x0, 0x80, 0x6, 0x6, 0x1ff, 0xffffffffffffff44, 0x2860, 0x4, 0x3, 0x6, 0x7fff, 0x6, 0x10001, 0x0, 0x802, 0x3, 0x1, 0x9, 0x4, 0x7, 0x6, 0x9, 0xffffffffffffff68, 0x9, 0x7f, 0x8, 0x100, 0x9, 0x9, 0x6, 0xdcff, 0x100000000, 0xfff, 0x81, 0x5, 0x8, 0x241, 0x0, 0x1, 0x3, 0x7, 0x2, 0x3b, 0x0, 0x59a2c485, 0x5, 0x0, 0x2, 0x8, 0x2, 0x5cf7, 0x6, 0xb3db, 0x10000, 0x1, 0x3, 0x8000, 0x8, 0xd865, 0x2, 0x1f, 0x7fff, 0x5, 0x100000001, 0x3, 0x1, 0x8, 0x80, 0x100000001, 0x1970, 0x100, 0x8000, 0x6, 0x4, 0x401, 0xfff, 0x9, 0x5, 0x1, 0x4, 0x4, 0x10001, 0x6, 0x0, 0x9, 0x4, 0x81, 0x0, 0xfffffffffffffff9, 0x6db, 0x10001, 0x4, 0x1, 0x1, 0x81, 0x28d6, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffff, 0xffff, 0x9]})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:54 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x380400, 0x40000000, 0x10000101)

[ 2271.855989][   T27] audit: type=1800 audit(1578859313.863:923): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16542 res=0
20:01:54 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
r7 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
write$P9_RSTATu(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="670000007d010000004500070001000100020100000001000000000000000000008080000000020000000800000000000000000001005e0b00265e70726f632a7070703106007d776c616e310d0073656375726974792a757365726488fc67a007d085c970fd91ac3a3d3723f1a1343fc8839ca6170da463290676cdd52e70c9db8b0d2124b0cf4d638a29d9fe43c48429d7e4ceff70e019ba3ee4abacac24b33a064cf986267098ac3a97468643923adfeafeb447b72c11822e642bf9e360e1c2fbb771a8d4523840ff9875aa484eb70f2bea7050a964af3dd4dac0ef62c8096a69", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x67)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x10000101)

[ 2271.978681][   T27] audit: type=1800 audit(1578859313.863:924): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16542 res=0
20:01:54 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x680400, 0x40000000, 0x10000101)

20:01:54 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x31000, 0x0, 0x10000101)

[ 2272.095337][   T27] audit: type=1800 audit(1578859313.863:925): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16542 res=0
[ 2272.179451][   T27] audit: type=1800 audit(1578859314.193:926): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17080 res=0
20:01:54 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000a00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:54 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x400400, 0x40000000, 0x10000101)

[ 2272.293255][   T27] audit: type=1800 audit(1578859314.193:927): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17080 res=0
20:01:55 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x700400, 0x40000000, 0x10000101)

20:01:55 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:01:55 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01000c00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:55 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x31800, 0x0, 0x10000101)

20:01:55 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x480400, 0x40000000, 0x10000101)

20:01:55 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
r5 = socket(0x0, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, 0x0)
setresuid(0x0, r6, 0x0)
r7 = getegid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01", 0x63}, {0x0}], 0x2, &(0x7f00000010c0), 0x0, 0x40044}], 0x2, 0x20000000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
write$P9_RSTATu(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="670000007d010000004500070001000100020100000001000000000000000000008080000000020000000800000000000000000001005e0b00265e70726f632a7070703106007d776c616e310d0073656375726974792a757365726488fc67a007d085c970fd91ac3a3d3723f1a1343fc8839ca6170da463290676cdd52e70c9db8b0d2124b0cf4d638a29d9fe43c48429d7e4ceff70e019ba3ee4abacac24b33a064cf986267098ac3a97468643923adfeafeb447b72c11822e642bf9e360e1c2fbb771a8d4523840ff9875aa484eb70f2bea7050a964af3dd4dac0ef62c8096a69", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8], 0x67)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r9 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r10 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r10, 0xe, &(0x7f0000000180)=""/169)
fallocate(r9, 0x0, 0x40000000, 0x10000101)

20:01:55 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x780400, 0x40000000, 0x10000101)

20:01:55 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x800000, 0x40000000, 0x10000101)

20:01:56 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01950f00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:56 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x0)
recvfrom$packet(r3, &(0x7f0000000000)=""/48, 0x30, 0x40001021, &(0x7f0000000300)={0x11, 0x8, r5, 0x1, 0x8}, 0x14)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r6, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000580))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000180)=""/169)
fallocate(r7, 0x0, 0x40000000, 0x10000101)

20:01:56 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x500400, 0x40000000, 0x10000101)

20:01:56 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x32000, 0x0, 0x10000101)

20:01:56 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x800400, 0x40000000, 0x10000101)

20:01:56 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01201000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:56 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
ioctl$KDDISABIO(r4, 0x4b37)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r5 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='cpuseteth0{\x00', 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000300)={r5, 0xfe, 0x77}, 0x0, &(0x7f0000000340)="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", &(0x7f0000000440)=""/119)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:01:56 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000000000)="02", 0x1}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r3, &(0x7f00000017c0), 0x73, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:56 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x580400, 0x40000000, 0x10000101)

20:01:57 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x32800, 0x0, 0x10000101)

20:01:57 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x880400, 0x40000000, 0x10000101)

20:01:57 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01001f00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r1, &(0x7f00000017c0), 0x73, 0x0)
r2 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r2, 0x0, 0x0)
r3 = dup2(r1, r2)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x1}}, 0x400d800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000040}, 0xfffffffffffffedc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r4, 0x66ae8a9de61db0d5, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x0, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x4009}, 0x93)
fcntl$setstatus(r0, 0x4, 0x42000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)

20:01:57 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x600400, 0x40000000, 0x10000101)

20:01:57 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x900400, 0x40000000, 0x10000101)

20:01:57 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x33000, 0x0, 0x10000101)

20:01:57 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x2400)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r5 = accept(r1, 0x0, &(0x7f0000000000))
r6 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x8, 0x401, 0x77, <r7=>0x0}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xdb, "98e97e8bcc3a226b332592680de8980609b4eb2630057cb7d836ae80a458d72fa511c84f5a8b7c55dc23e2518dedc0e987a357f5464ae93c66b9b849515e8a9ea069e92657f78a75111f61ff0443d6e5c863bcfb86ad9fc35dfd617c8c12ce3210457ebe0031678370e85da2f8792c6a71aed896c3c096247e898d95d6b80cb174a6b6a6130f1601a205b4aa2bda2c10746925e1952eefcddeb2c50365407eae6f93b1bec94c3524c73c84a0fb3cc53df34e003dd98306f093f87007bf6498d279fa06c3bc1165914eca74e7582f5fcdd28968d2ea87ce5a9cea7c"}, &(0x7f0000000400)=0xe3)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r9 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r9, 0xe, &(0x7f0000000180)=""/169)
fallocate(r8, 0x0, 0x40000000, 0x10000101)

20:01:57 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x32800, 0x0, 0x10000101)

20:01:57 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01002000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:58 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x600a00, 0x40000000, 0x10000101)

20:01:58 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x980400, 0x40000000, 0x10000101)

20:01:58 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xa00400, 0x40000000, 0x10000101)

20:01:58 executing program 0:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0x980400, 0x40000000, 0x10000101)

20:01:58 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01102000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:58 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x33800, 0x0, 0x10000101)

[ 2276.074170][   T27] kauditd_printk_skb: 72 callbacks suppressed
[ 2276.074189][   T27] audit: type=1800 audit(1578859318.693:1000): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
[ 2276.100671][   T27] audit: type=1800 audit(1578859318.703:1001): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16883 res=0
[ 2276.129823][   T27] audit: type=1800 audit(1578859318.723:1002): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
20:01:58 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x680000, 0x40000000, 0x10000101)

20:01:58 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x1)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

[ 2276.284005][   T27] audit: type=1800 audit(1578859318.723:1003): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16586 res=0
[ 2276.303914][   T27] audit: type=1800 audit(1578859318.733:1004): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16883 res=0
[ 2276.352184][   T27] audit: type=1800 audit(1578859318.733:1005): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16883 res=0
[ 2276.372162][   T27] audit: type=1800 audit(1578859318.953:1006): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16535 res=0
[ 2276.406465][   T27] audit: type=1800 audit(1578859318.953:1007): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16535 res=0
20:01:59 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xc00300, 0x40000000, 0x10000101)

20:01:59 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x600a00, 0x40000000, 0x10000101)

20:01:59 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01002300000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2276.644515][   T27] audit: type=1800 audit(1578859319.263:1008): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17093 res=0
20:01:59 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x34000, 0x0, 0x10000101)

[ 2276.769766][   T27] audit: type=1800 audit(1578859319.283:1009): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17093 res=0
20:01:59 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xc80300, 0x40000000, 0x10000101)

20:01:59 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x680600, 0x40000000, 0x10000101)

20:01:59 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01003f00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:01:59 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
rt_sigreturn()
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000480))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x440100, 0xf)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000280)={0xa, 0x0, [{0x80000007, 0x6, 0x5, 0x6, 0x2}, {0x4, 0x401, 0x69, 0x6, 0x7f}, {0x2, 0x4, 0x81, 0x1ff, 0x9}, {0xc0000000, 0x8, 0x2, 0xfffffffc, 0x6}, {0x2, 0x0, 0x0, 0x2, 0xfffffff9}, {0xa, 0xaed9, 0x100, 0x6, 0x8}, {0xc0000005, 0x2798, 0x31, 0x10001, 0x20}, {0x1, 0x6, 0x4b8, 0x3, 0x9}, {0x2, 0x2, 0x800, 0x6, 0x6}, {0xb, 0x8, 0x200, 0x17ef, 0x9}]})
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x5c)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:01:59 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x1)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:02:00 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x34800, 0x0, 0x10000101)

20:02:00 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
r3 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r3, 0x0, 0x0)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x5)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000400))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
r7 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40000, 0x1000)
getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000280)=0xff, &(0x7f00000002c0)=0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0xe12891f7ce473fce, 0x0)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:02:00 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01004000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:00 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd00300, 0x40000000, 0x10000101)

20:02:00 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x34000, 0x0, 0x10000101)

20:02:00 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x700000, 0x40000000, 0x10000101)

20:02:00 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x35000, 0x0, 0x10000101)

20:02:00 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:02:00 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01004800000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:00 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd00400, 0x40000000, 0x10000101)

20:02:01 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x67800, 0x40000000, 0x10000101)

20:02:01 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01004c00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:01 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x700600, 0x40000000, 0x10000101)

20:02:01 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd80300, 0x40000000, 0x10000101)

20:02:01 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x35800, 0x0, 0x10000101)

20:02:01 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_open_dev$media(0x0, 0x0, 0x2400)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x788, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000280)=""/66)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000083, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x1f)
fallocate(r2, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:02:01 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xd80400, 0x40000000, 0x10000101)

20:02:01 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x67800, 0x40000000, 0x10000101)

20:02:01 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01006800000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:02 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x780000, 0x40000000, 0x10000101)

20:02:02 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000280)=""/179)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
r5 = dup2(r1, r4)
ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000340)=""/7)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x8)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:02:02 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x36000, 0x0, 0x10000101)

20:02:02 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe00300, 0x40000000, 0x10000101)

20:02:02 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01006c00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:02 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x700600, 0x40000000, 0x10000101)

20:02:02 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000)={0x0, 0x20}, 0x2)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:02:02 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x780600, 0x40000000, 0x10000101)

20:02:02 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe00400, 0x40000000, 0x10000101)

20:02:02 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x36800, 0x0, 0x10000101)

20:02:02 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01007400000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:03 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000280)=""/179)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
r5 = dup2(r1, r4)
ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000340)=""/7)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x8)
r7 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000180)=""/169)
fallocate(r6, 0x0, 0x40000000, 0x10000101)

20:02:03 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe80300, 0x40000000, 0x10000101)

20:02:03 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01007a00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:03 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x800000, 0x40000000, 0x10000101)

20:02:03 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
r4 = pkey_alloc(0x0, 0x0)
pkey_free(r4)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280), 0x400)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:02:03 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r5, &(0x7f00000017c0), 0x73, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x0, 0x40000000, 0x10000101)

20:02:03 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x37000, 0x0, 0x10000101)

[ 2281.221821][   T27] kauditd_printk_skb: 70 callbacks suppressed
[ 2281.221862][   T27] audit: type=1800 audit(1578859323.833:1080): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16544 res=0
[ 2281.306596][   T27] audit: type=1800 audit(1578859323.833:1081): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16544 res=0
20:02:04 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xe80400, 0x40000000, 0x10000101)

20:02:04 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d010f9500000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

[ 2281.591018][   T27] audit: type=1800 audit(1578859324.213:1082): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16523 res=0
[ 2281.611613][   T27] audit: type=1800 audit(1578859324.213:1083): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16523 res=0
[ 2281.655596][   T27] audit: type=1800 audit(1578859324.233:1084): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17121 res=0
[ 2281.675914][   T27] audit: type=1800 audit(1578859324.233:1085): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17121 res=0
20:02:04 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x36800, 0x0, 0x10000101)

[ 2281.695788][   T27] audit: type=1800 audit(1578859324.253:1086): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17121 res=0
[ 2281.715404][   T27] audit: type=1800 audit(1578859324.273:1087): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16884 res=0
20:02:04 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xf00300, 0x40000000, 0x10000101)

[ 2281.738870][   T27] audit: type=1800 audit(1578859324.273:1088): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16884 res=0
[ 2281.761022][   T27] audit: type=1800 audit(1578859324.273:1089): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16884 res=0
20:02:04 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nf_conntrack_expect\x00')
preadv(r4, &(0x7f00000017c0), 0x73, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000280)={{0x0, 0x2, 0x9, 0x0, 0x4db}, 0xd9, 0x7, 0x8})
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:02:04 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x800600, 0x40000000, 0x10000101)

20:02:04 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d0100de00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:04 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x37800, 0x0, 0x10000101)

20:02:04 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xf00400, 0x40000000, 0x10000101)

20:02:05 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x880600, 0x40000000, 0x10000101)

20:02:05 executing program 0:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x36800, 0x0, 0x10000101)

20:02:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d01c0ed00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:05 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
recvmsg$can_raw(r0, &(0x7f0000000c00)={&(0x7f00000004c0)=@caif, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/31, 0x1f}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/55, 0x37}, {&(0x7f0000000a00)=""/44, 0x2c}], 0xa, &(0x7f0000000b80)=""/74, 0x4a}, 0x2d5829e4023e1398)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000980)={0x5, 0x7d})
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x10, 0x4fe, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = syz_open_dev$media(0x0, 0x0, 0x90040)
accept$unix(r4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r4, &(0x7f00000002c0)="e30a4ba6e98bb58760295c21e5d89f49e1771c4d2ac0bcb0827c4807ab72c66f13a939f041b7bf93969416c986ca288423b8f6f1b24922ecd25948891058022c04564af0da29c8ceecfab126d610bcbf48a2c2c4ac564aecdd835b47314f5ac7e8e440229d46834db3a9e49a999ec30e6aebc8fb55366103d63af29cc00df4d2a5ffa9539cd2ecd621cbb2138078714c583cb4e70f6e892468e1a351ba84043169a0e740ea8a7a8df376f22b49cfd36feb9c785aa563daf87298cdea567f609f6dcc508ad5117154352fd9dafc4a", &(0x7f00000003c0)="fd44287f75c3c800dfa87ef48219e7d5b8cc92bdd4f4e3a239713467dbdb3c9acc737edfd63ad7d152ac00dc33a4e2a41437ac67340592fb14518ac5605e522179375b702eed8be045f916c09561dd8ea590887ae2d23717142ce68afd13188b7a459c053c7ae6ac3fe8561afa93ff3c8aa48e59d303663fd726750e8da163675e7fcb0d41dcdfe6fd27d5427953b549496e36"}, 0x20)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
r7 = openat(r1, &(0x7f0000000000)='./bus\x00', 0x80, 0x4e)
unlinkat(r7, &(0x7f0000000280)='./bus\x00', 0x0)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000180)=""/169)
fallocate(r5, 0x0, 0x40000000, 0x10000101)

20:02:05 executing program 2:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x38000, 0x0, 0x10000101)

20:02:05 executing program 1:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="8da4363a00000000000000000000004d0100ff00000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4df5f873574f257e0a01e2a6a02f5e071383fab889e335c3be9b7b795a669a53f2fe9eb4eb7918628af41b2d5fd98372e7c2a6970f55044163dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fdedeb0ed51ed1df6a248a267b6620fff", 0xbe, 0x10000}], 0x0, 0x0)

20:02:05 executing program 3:
syz_open_dev$media(0x0, 0x0, 0x2400)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
lstat(0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000180)=""/169)
fallocate(r2, 0xf80300, 0x40000000, 0x10000101)

20:02:05 executing program 5:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_dev$media(0x0, 0x0, 0x2400)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = open(0x0, 0x8040, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000003080))
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001})
pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
lstat(0x0, &(0x7f0000000b00))
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x10, 0x70e000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x20, 0x0, 0xfffffeff000)
write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000180)=""/169)
fallocate(r4, 0x900600, 0x40000000, 0x10000101)

[ 2283.117940][T10921] ==================================================================
[ 2283.126249][T10921] BUG: KCSAN: data-race in __lru_cache_add / lru_add_drain_all
[ 2283.133791][T10921] 
[ 2283.136137][T10921] read to 0xffff88812c1299e0 of 1 bytes by task 10932 on cpu 0:
[ 2283.143778][T10921]  lru_add_drain_all+0x17e/0x3d0
[ 2283.148735][T10921]  invalidate_bdev+0x6e/0x90
[ 2283.153335][T10921]  btrfs_close_bdev.part.0+0x93/0xa0
[ 2283.158642][T10921]  close_fs_devices.part.0+0x161/0x510
[ 2283.164119][T10921]  btrfs_close_devices+0x92/0x170
[ 2283.169189][T10921]  btrfs_mount_root+0x793/0x9c0
[ 2283.174059][T10921]  legacy_get_tree+0x7e/0xf0
[ 2283.178658][T10921]  vfs_get_tree+0x56/0x1a0
[ 2283.183088][T10921]  fc_mount+0x20/0x80
[ 2283.187086][T10921]  vfs_kern_mount.part.0+0xe6/0xf0
[ 2283.192211][T10921]  vfs_kern_mount+0x49/0x70
[ 2283.197416][T10921]  btrfs_mount+0x250/0xf37
[ 2283.201847][T10921]  legacy_get_tree+0x7e/0xf0
[ 2283.206441][T10921]  vfs_get_tree+0x56/0x1a0
[ 2283.210876][T10921]  do_mount+0x1004/0x14f0
[ 2283.215213][T10921]  ksys_mount+0xe8/0x160
[ 2283.219468][T10921]  __x64_sys_mount+0x70/0x90
[ 2283.224070][T10921]  do_syscall_64+0xcc/0x3a0
[ 2283.228581][T10921]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2283.234466][T10921] 
[ 2283.236807][T10921] write to 0xffff88812c1299e0 of 1 bytes by task 10921 on cpu 1:
[ 2283.244538][T10921]  __lru_cache_add+0xbf/0x1d0
[ 2283.249229][T10921]  lru_cache_add+0x1f/0x30
[ 2283.253657][T10921]  add_to_page_cache_lru+0x16a/0x260
[ 2283.258957][T10921]  ext4_mpage_readpages+0x329/0x1580
[ 2283.264255][T10921]  ext4_readpages+0x92/0xc0
[ 2283.268780][T10921]  read_pages+0xa2/0x2d0
[ 2283.273033][T10921]  __do_page_cache_readahead+0x353/0x390
[ 2283.278674][T10921]  ondemand_readahead+0x35d/0x710
[ 2283.283711][T10921]  page_cache_async_readahead+0x22c/0x250
[ 2283.289444][T10921]  generic_file_read_iter+0xffc/0x1440
[ 2283.294916][T10921]  ext4_file_read_iter+0x10c/0x380
[ 2283.300046][T10921]  new_sync_read+0x389/0x4f0
[ 2283.304652][T10921]  __vfs_read+0xb1/0xc0
[ 2283.308821][T10921]  integrity_kernel_read+0xa1/0xe0
[ 2283.313948][T10921]  ima_calc_file_hash_tfm+0x1b5/0x260
[ 2283.319436][T10921]  ima_calc_file_hash+0x158/0xf30
[ 2283.324481][T10921]  ima_collect_measurement+0x3b1/0x3e0
[ 2283.329960][T10921]  process_measurement+0x9e3/0x1190
[ 2283.335181][T10921]  ima_file_check+0x7e/0xb0
[ 2283.339878][T10921]  path_openat+0xfdb/0x3580
[ 2283.344402][T10921]  do_filp_open+0x11e/0x1b0
[ 2283.349049][T10921]  do_sys_open+0x3b3/0x4f0
[ 2283.353479][T10921]  __x64_sys_open+0x55/0x70
[ 2283.358133][T10921]  do_syscall_64+0xcc/0x3a0
[ 2283.362656][T10921]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2283.368562][T10921] 
[ 2283.370918][T10921] Reported by Kernel Concurrency Sanitizer on:
[ 2283.377082][T10921] CPU: 1 PID: 10921 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
[ 2283.385877][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2283.395951][T10921] ==================================================================
[ 2283.404025][T10921] Kernel panic - not syncing: panic_on_warn set ...
[ 2283.410632][T10921] CPU: 1 PID: 10921 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
[ 2283.419315][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2283.429378][T10921] Call Trace:
[ 2283.432685][T10921]  dump_stack+0x11d/0x181
[ 2283.437032][T10921]  panic+0x210/0x640
[ 2283.441064][T10921]  ? vprintk_func+0x8d/0x140
[ 2283.445682][T10921]  kcsan_report.cold+0xc/0xd
[ 2283.450300][T10921]  kcsan_setup_watchpoint+0x3fe/0x460
[ 2283.455694][T10921]  __tsan_unaligned_write1+0xc3/0x100
[ 2283.461082][T10921]  __lru_cache_add+0xbf/0x1d0
[ 2283.465780][T10921]  lru_cache_add+0x1f/0x30
[ 2283.470208][T10921]  add_to_page_cache_lru+0x16a/0x260
[ 2283.475521][T10921]  ext4_mpage_readpages+0x329/0x1580
[ 2283.480838][T10921]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2283.487097][T10921]  ? should_fail+0xd4/0x45d
[ 2283.491615][T10921]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2283.497531][T10921]  ext4_readpages+0x92/0xc0
[ 2283.502656][T10921]  ? ext4_releasepage+0x1f0/0x1f0
[ 2283.507860][T10921]  read_pages+0xa2/0x2d0
[ 2283.512822][T10921]  ? __page_cache_alloc+0xb3/0x1a0
[ 2283.517962][T10921]  __do_page_cache_readahead+0x353/0x390
[ 2283.524585][T10921]  ondemand_readahead+0x35d/0x710
[ 2283.529627][T10921]  page_cache_async_readahead+0x22c/0x250
[ 2283.535363][T10921]  generic_file_read_iter+0xffc/0x1440
[ 2283.540852][T10921]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2283.547115][T10921]  ext4_file_read_iter+0x10c/0x380
[ 2283.552239][T10921]  new_sync_read+0x389/0x4f0
[ 2283.556852][T10921]  __vfs_read+0xb1/0xc0
[ 2283.561027][T10921]  integrity_kernel_read+0xa1/0xe0
[ 2283.566154][T10921]  ima_calc_file_hash_tfm+0x1b5/0x260
[ 2283.571547][T10921]  ? retint_kernel+0x1b/0x1b
[ 2283.576157][T10921]  ? tomoyo_domain_quota_is_ok+0x122/0x2b0
[ 2283.581994][T10921]  ? __sanitizer_cov_trace_pc+0x50/0x50
[ 2283.587739][T10921]  ? __rcu_read_unlock+0x66/0x3d0
[ 2283.592778][T10921]  ? tomoyo_profile+0x42/0x50
[ 2283.597561][T10921]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2283.604184][T10921]  ? setuid_policy_lookup+0xea/0x120
[ 2283.609490][T10921]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2283.615979][T10921]  ? apparmor_capable+0x260/0x470
[ 2283.621033][T10921]  ima_calc_file_hash+0x158/0xf30
[ 2283.626076][T10921]  ? security_capable+0x92/0xb0
[ 2283.630962][T10921]  ? ext4_xattr_get+0x10b/0x5c0
[ 2283.635841][T10921]  ? ima_match_policy+0x569/0x960
[ 2283.641035][T10921]  ima_collect_measurement+0x3b1/0x3e0
[ 2283.646520][T10921]  process_measurement+0x9e3/0x1190
[ 2283.651751][T10921]  ? ext4_file_open+0x11e/0x490
[ 2283.656629][T10921]  ? __rcu_read_unlock+0x66/0x3d0
[ 2283.661689][T10921]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2283.667611][T10921]  ? aa_get_task_label+0x202/0x380
[ 2283.672750][T10921]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2283.679028][T10921]  ? apparmor_task_getsecid+0x95/0xc0
[ 2283.684442][T10921]  ima_file_check+0x7e/0xb0
[ 2283.688957][T10921]  path_openat+0xfdb/0x3580
[ 2283.693485][T10921]  ? futex_exit_recursive+0x30/0x80
[ 2283.698707][T10921]  do_filp_open+0x11e/0x1b0
[ 2283.703256][T10921]  ? __alloc_fd+0x2ef/0x3b0
[ 2283.707794][T10921]  do_sys_open+0x3b3/0x4f0
[ 2283.712223][T10921]  __x64_sys_open+0x55/0x70
[ 2283.716754][T10921]  do_syscall_64+0xcc/0x3a0
[ 2283.721274][T10921]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2283.727167][T10921] RIP: 0033:0x45af49
[ 2283.731067][T10921] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2283.750672][T10921] RSP: 002b:00007f9589338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 2283.759096][T10921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[ 2283.767105][T10921] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 0000000020002000
[ 2283.775087][T10921] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 2283.783068][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95893396d4
[ 2283.791048][T10921] R13: 00000000005004bf R14: 00000000004e0b08 R15: 00000000ffffffff
[ 2283.800463][T10921] Kernel Offset: disabled
[ 2283.805323][T10921] Rebooting in 86400 seconds..