0000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xac251f8878}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1779.276964][T16069] EXT4-fs (loop2): journaled quota format not specified
06:43:39 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f000000da00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2061, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x5, 0x200, 0x3, [0x8, 0x7, 0x63b17672]}})
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040))

[ 1779.356228][T16069] EXT4-fs (loop2): journaled quota format not specified
06:43:39 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000081000000080600006061ae6e00143c00c5b40dcaf1dad41524ec72308789242b81020000000000000000000700000000000000009f87", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000785fb40e13a3a4689895cf1f58355d74d15861b6ac2f9a24cd9f5cd307963626e07b5b04d11c504739eccd3b2b6c79da7a8cad69be05b8612d725108e94d35178c52caa8f353f485a0b1a128801b50ac979157d1f5938330f373da0227c4e0664220e34e3f812b8cf9fc5808b8a491b8e79ba8201956a9c920b9984208058d623ef3af064672dd00b47e3d01e3db368f44e4d157fb997a0000000000"], 0x46)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x2, 0x9, 0x8000, 0x8, 0x5, 0x80000001, 0x3}, &(0x7f0000000040)=0x20)

06:43:39 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff010000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:39 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xc00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:39 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd102000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="3200000000000000010000000000000063111c004c53569d800557850000fdb8fe0000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = accept(r2, &(0x7f0000000180)=@ax25={{0x3, @null}, [@netrom, @bcast, @bcast, @null, @remote, @null, @netrom, @bcast]}, &(0x7f0000001200)=0x80)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7b8, 0x0, 0x2, 0x2, 0x98, 0x1}, 0x20)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000012c0)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000001300)={@rand_addr="36a1091f8ed89b6b703e3e2361cf6d30", 0x43, r6})
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x1586, 0x800}, 0x8)
r9 = dup(r4)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r10, r0, 0x0, 0x209)

06:43:40 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:40 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfefdffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:40 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000300), 0x10)
io_setup(0xb, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0300000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000001000000", 0x48}])
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r8}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={<r9=>r8, 0x3ff}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r9, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @multicast1}, 0x95b}}}, &(0x7f0000000140)=0x84)

06:43:40 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000002c0)=""/91, 0x5b)
renameat2(r0, &(0x7f0000000080)='./file2\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x18, {0x2, 0x4e22, @broadcast}, 'ip6gretap0\x00'})

06:43:40 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:40 executing program 4:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x614001, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x86}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x805}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f0, 0x98, 0x98, 0x98, 0x98, 0x98, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98, 0x0, {0x6020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, '\x00', 'vcan0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_device_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)

06:43:40 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xd00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:40 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff0f0000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:40 executing program 2:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getegid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/204, 0xcc)
keyctl$chown(0x4, 0x0, 0x0, r2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/schedstat\x00', 0x0, 0x0)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r5)
chown(&(0x7f0000000180)='./file1\x00', r4, r5)
r6 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r7)
chown(&(0x7f0000000180)='./file1\x00', r6, r7)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
fstat(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r12)
chown(&(0x7f0000000180)='./file1\x00', r11, r12)
mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000600)='fuseblk\x00', 0x100088, &(0x7f00000009c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0xa38a}}, {@max_read={'max_read', 0x3d, 0x81}}, {@max_read={'max_read', 0x3d, 0x20}}], [{@permit_directio='permit_directio'}, {@euid_eq={'euid', 0x3d, r6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r10}}, {@fowner_lt={'fowner<', r11}}]}})
socket$inet_tcp(0x2, 0x1, 0x0)
setgroups(0x31dbe445, &(0x7f00000002c0))
r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x400000, 0x0)
ioctl$RTC_WIE_ON(r13, 0x700f)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3e3, 0x3bc177af4b1a627b)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/vmallocinfo\x00', 0x0, 0x0)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r14, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r15, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), 0x0)
r16 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r16, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7})
clock_gettime(0x0, &(0x7f0000000440))
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$vsock_stream(r13, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000)
lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5)
unshare(0x60020000)

[ 1780.762954][T16438] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
06:43:41 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:41 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
pread64(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x6)

06:43:41 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1781.035413][T16545] IPVS: ftp: loaded support on port[0] = 21
06:43:41 executing program 4:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xc0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x66de897b, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
sendto$inet(r1, &(0x7f0000000bc0)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e05e4e609516a", 0xd4, 0x0, 0x0, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200))
read(r1, &(0x7f0000000ac0)=""/245, 0x100000394)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000cc0)={[0x8c9, 0xfffffff8, 0xfffffffd, 0xd7, 0x5, 0x6, 0x100, 0x9, 0x2, 0x6, 0x9, 0x636, 0xfffffffa, 0x7f, 0x10001, 0xffff, 0x0, 0x7298dcf4, 0x20, 0xb0, 0x6, 0x216, 0x393dd862, 0x0, 0x5, 0x7f7de742, 0x8001, 0x0, 0x9, 0xc3, 0xfff, 0x4, 0xfffffff7, 0xf0b5ba7, 0x3, 0x27da, 0xffffffff, 0x7fffffff, 0x7ff, 0x20, 0x1ff, 0x1, 0x101, 0x4623, 0x1, 0x2, 0x20, 0x2, 0x10001, 0xfffffffc, 0x100, 0x9, 0x6, 0x2, 0xfffffe01, 0x10001, 0x6, 0x7fff, 0x7, 0xfff, 0x1, 0x9, 0xffff, 0xf28d, 0x900000, 0xffff, 0x3ff, 0x0, 0x4, 0x7fff, 0x80, 0x2, 0x5, 0x4, 0x10001, 0x4, 0x1000, 0x9, 0x8e20, 0x7ff, 0x81, 0x2fd5e4d7, 0x0, 0x3, 0xfffffff8, 0x4, 0x9, 0x8, 0x34, 0x3, 0x6, 0x0, 0x94e0, 0xfffffff8, 0xfffffffa, 0x6, 0x6, 0x4, 0x80000000, 0x297, 0xff, 0x1, 0x9, 0x6, 0x9, 0x6, 0x9, 0xc191, 0x0, 0xe5, 0x400, 0x0, 0x5, 0x67cf, 0x5, 0x8000, 0xffffffff, 0x0, 0x2, 0xffffff01, 0xf41e, 0xffff, 0x1, 0x2097276, 0x3, 0xfffffffc, 0xb51, 0x9, 0x4, 0xffffff05, 0x5, 0x9, 0xfff, 0x7, 0xff, 0xffff, 0x3, 0x8001, 0x5, 0xff, 0xa3, 0x7fff, 0x2, 0x101, 0x230, 0xffffff04, 0xffff0000, 0x5, 0x5, 0x1f, 0x20, 0x6, 0x2, 0x5, 0x9, 0x4, 0x1, 0x2, 0x1d, 0x40, 0x1, 0x4, 0x101, 0x1b0, 0x6800, 0xffffffe0, 0x8, 0x6, 0x6, 0x4, 0xce7, 0xff, 0x5, 0x6, 0x9, 0x8000, 0x4aa, 0x1f, 0x100, 0x2, 0xedc, 0x10001, 0x15148010, 0x7, 0x9, 0x8, 0x5, 0x25, 0x7, 0x8, 0x6, 0x7, 0x0, 0x2, 0x7, 0x6269e485, 0x8, 0x3f, 0x5, 0x8, 0xa2a, 0x0, 0x800, 0x5, 0x9, 0x1f, 0x7, 0x1000, 0xfc, 0x21e2, 0xcc, 0x2, 0x6, 0x8, 0xc000, 0x3, 0x7fff, 0x2, 0xfffffff7, 0x0, 0x4, 0x0, 0x3, 0x7, 0x8000, 0x4, 0xfffffffb, 0x662, 0x5, 0x7ff, 0xff, 0xf9da, 0x7ff, 0x4, 0x401, 0x4, 0x4, 0x0, 0x1, 0x50e0, 0x9, 0xae, 0x7, 0xffffff71, 0x1, 0x8, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffc, 0x80, 0x8, 0x2, 0x4, 0x9, 0x2, 0x1, 0x100, 0x100000, 0x40, 0x8, 0x200, 0x0, 0x6126, 0x7, 0x58, 0x1, 0xd6, 0x8, 0x6, 0xfffffbff, 0x7, 0x3ff, 0xf3, 0x89, 0x0, 0x9, 0x8, 0x2, 0x5, 0x4, 0x81, 0xffff9437, 0xeb3, 0x0, 0x8, 0x5, 0x6, 0x1f63, 0x36b, 0x10000, 0x400, 0x2, 0x2, 0x3, 0x5, 0x2, 0xfffffffb, 0x0, 0x9, 0x4, 0x5, 0xffffffff, 0x5, 0x5, 0x4, 0x2, 0xde6b, 0x47, 0xfffffc5b, 0x1000, 0x7f, 0x2, 0x2097, 0x5, 0x4, 0x6, 0x4666e5d9, 0x1, 0x2, 0x9f, 0x0, 0x5, 0x6, 0x4503, 0x759, 0x3, 0x9, 0x0, 0x1, 0x400, 0xb87e, 0x0, 0x7fff, 0xffff, 0x4, 0x5, 0x8001, 0x5, 0x100, 0x80000001, 0x3, 0xbf4, 0x100000, 0x100, 0x101, 0x8, 0xd33, 0x410b2d43, 0x5, 0x4, 0x6b2a, 0x9, 0x3f, 0x1, 0x5, 0x0, 0x5, 0x7, 0x101, 0x6043, 0xfff, 0x71, 0x80000001, 0x2, 0x1, 0x4b, 0x9831, 0x8, 0x7fffffff, 0x10000, 0x10001, 0x772, 0x401, 0x0, 0x5, 0x800, 0x3, 0x1f, 0x0, 0x0, 0xffff, 0x401, 0x6, 0x9, 0x4, 0x4, 0x5, 0x9, 0x0, 0xe1ae, 0x9, 0x8, 0x6, 0x8d3b, 0x8, 0x4, 0x4, 0x7, 0x2cab, 0x8, 0x5, 0x200, 0x5, 0x4, 0x1, 0x7ff, 0x8, 0x7d, 0x100, 0x4, 0xff, 0x7, 0x8, 0x0, 0x4, 0x9, 0x0, 0x3, 0x800, 0x7, 0x2, 0x7664, 0x3f, 0xf8f, 0xfffffffd, 0x7, 0xfffffffc, 0x5, 0x9572, 0x10001, 0x3, 0x2, 0x6, 0x10000, 0x2, 0x3, 0x20, 0x2, 0xfff, 0x7, 0x5, 0x0, 0x20, 0x0, 0x5, 0x8, 0x6, 0x8, 0x6, 0x7fffffff, 0x9, 0x401, 0x5, 0x3f, 0x1, 0xf3, 0x1000, 0x9, 0x3ff, 0x3, 0x9, 0xffff7fff, 0x6, 0x8, 0x6, 0x8000, 0x20, 0x2b06, 0x6, 0x101, 0x7e, 0x1f, 0x0, 0x9, 0x80000000, 0x5, 0x0, 0x7ff, 0xfff, 0x6f, 0x800, 0x40, 0x81, 0xffffffff, 0x1, 0x185, 0x30, 0x10000, 0x2, 0x0, 0x6, 0x40, 0x6, 0x800, 0x2, 0x2, 0x10001, 0x7, 0xb721, 0x1, 0x59, 0x4, 0x68, 0x3f, 0x5, 0x8, 0x4, 0x401, 0x3, 0xce7, 0x1, 0x5, 0xe59, 0x5, 0x8, 0x3, 0x8, 0x3, 0x5, 0x5, 0x1, 0xd72, 0x7, 0x1, 0x3f, 0xff, 0x8, 0x462a, 0x3f, 0x0, 0x3, 0x9, 0x4, 0x200, 0x9, 0x7ca, 0x0, 0x4, 0x7, 0x7ff, 0xff, 0x339, 0x0, 0xcc, 0x5, 0x8, 0xffff, 0x5d, 0x7, 0x9, 0x8, 0xff, 0x7, 0x7, 0x2, 0x3, 0x5, 0x2, 0x80000001, 0x8, 0x20, 0x100, 0xf36, 0x80000001, 0x6, 0x0, 0xbd, 0x9, 0x1ff, 0x4, 0x200, 0x400, 0xfff00000, 0x0, 0x76382078, 0x7fffffff, 0xfff, 0x3, 0x2, 0x9, 0xff, 0x8, 0x7, 0x10000, 0x94e1, 0x101, 0x401, 0x0, 0x4, 0x5, 0x3, 0x6, 0xffff, 0x752, 0x4, 0xffff, 0x8b, 0x80000000, 0x8c55, 0x2, 0x7, 0x7, 0x3, 0x8, 0x0, 0x0, 0x5, 0x8, 0x3ac, 0x65, 0x9, 0x8, 0x6, 0x400, 0xc00, 0x2, 0xb3c3, 0x6, 0xffff50c5, 0x3ff, 0x8000, 0x0, 0x1, 0x3, 0x0, 0x100, 0x9, 0x20, 0x5, 0x8000, 0x9, 0x7, 0x0, 0x4, 0x1, 0x3ff, 0x401, 0x8001, 0xffffffc1, 0xdff5, 0x10001, 0x7ff, 0x199, 0x9, 0x7fffffff, 0xcc8, 0x3, 0x288, 0x81, 0x20, 0x4, 0x6, 0x4, 0x100, 0x4, 0x7, 0x0, 0x8001, 0x4, 0x80000001, 0x8, 0x0, 0x401, 0x2, 0xfffffffa, 0x9, 0x1, 0x7fffffff, 0x8, 0x6, 0x0, 0x8, 0x4c, 0x40, 0x7, 0x3ff, 0x3ff, 0x6a12, 0x2, 0x6, 0x7, 0xffff, 0xfff, 0xffff, 0x800, 0x31, 0x2, 0x0, 0x7f, 0x5, 0x690, 0x6, 0x1000, 0x5, 0xff, 0x5, 0x8, 0x1c, 0xffffff81, 0x0, 0x80000001, 0x1000, 0x3, 0x8, 0xffffa717, 0xe02, 0x1000, 0x9ed, 0x7fffffff, 0x4, 0x5, 0xff, 0x9, 0xfd, 0x400, 0xfffffff7, 0x2, 0x8c5, 0xfffffff8, 0xffff, 0x3, 0xd7b9, 0x0, 0x2, 0x7f, 0x7, 0xab0, 0x2, 0x1, 0xf28, 0x2, 0x3ff, 0xfff, 0xaa, 0x20, 0xfffffffb, 0x8001, 0xfffffff8, 0x2, 0x674, 0x7, 0x9, 0x9, 0x7fffffff, 0x68, 0x81, 0x1, 0x24, 0x1, 0x10000, 0x2, 0x6, 0xc5f0, 0x6, 0xfff, 0xfffffe38, 0x8, 0xad10, 0x4, 0xfff, 0x8, 0x6, 0x100, 0x4, 0xb9, 0x3f, 0x7, 0x10000, 0x7, 0x7fff, 0x0, 0x1d, 0x0, 0x80000000, 0x800, 0x800, 0x7cee, 0xcb7, 0xfb, 0x1, 0x1f, 0x9, 0x80000000, 0x6000000, 0x1000, 0xf3, 0x2, 0x4, 0x5, 0x2, 0x60caf365, 0x2, 0x4, 0x80000001, 0x80000001, 0x7fffffff, 0x6, 0x8001, 0x9, 0x4, 0x6, 0x2, 0x10000, 0x3f, 0x1ff, 0x3a, 0xff, 0x3f, 0x8, 0x7fff, 0xceaf, 0x9, 0x3f, 0x8, 0xfff, 0x3, 0x6, 0x7f, 0x1, 0x5, 0x5, 0x1, 0x6, 0x6, 0xcc, 0x8, 0x4, 0x70033be7, 0x7fff, 0x89, 0x200, 0x5d5d, 0x7fff, 0xff, 0x2, 0x6, 0x100, 0x400, 0x101, 0x5a03, 0x6, 0x9, 0x3, 0x9, 0x9, 0x1, 0x401, 0x3, 0x1, 0x2fa, 0x9, 0x80000001, 0x81, 0x2, 0x3ff, 0x2, 0x6719, 0x9, 0x9, 0x9a7, 0x93e, 0x9, 0x8, 0x4, 0x2, 0x1, 0x9, 0x5, 0xb1cb, 0x5, 0xba, 0x6, 0xffff, 0x6, 0x7, 0x6, 0x2, 0x2, 0x5, 0x640, 0x1, 0x6, 0x3038, 0x1, 0x1, 0x57c0fdc4, 0x9, 0x6, 0xff, 0x3d, 0x3, 0x7, 0x3, 0x7, 0x2, 0x9, 0x7f, 0x2, 0x5, 0x11, 0x2, 0x10001, 0x9, 0x100, 0x3ff, 0x8, 0x0, 0x1, 0xfffffffe, 0x6, 0x1, 0x69c, 0x100, 0x7, 0x8001, 0xfb, 0x200, 0x5, 0x3, 0x9, 0x0, 0x8, 0x100, 0x3, 0xee07, 0x6, 0x40000000, 0x800, 0x800000, 0x400, 0x800, 0x7ff, 0x1, 0x6, 0x8, 0xc6, 0x93, 0x0, 0xc3de, 0x4, 0x5, 0x401, 0x2, 0x1, 0x2, 0x401, 0x100, 0x0, 0x9, 0x1000, 0xcb, 0x4, 0x80000000, 0x7, 0x6, 0x7f, 0x7, 0x4, 0xc4a, 0x1, 0x40, 0x933b, 0x3, 0xa4ff, 0x2, 0x401, 0x9, 0x8, 0x4, 0xfffffff8, 0x9, 0x1, 0xcfd, 0x30, 0x1f, 0x4, 0x5, 0x4, 0x53, 0xf9, 0x2, 0x7fffffff, 0x6, 0xfffffff9, 0x7, 0x4, 0xffff7fff, 0x20, 0x1, 0x40, 0x0, 0xffff, 0xfffffffc, 0x5, 0x3, 0x5, 0xffffffff, 0x5000000, 0x7fffffff, 0x101, 0x2e, 0x7ff, 0x3, 0x8, 0x8, 0x9, 0x9322, 0x5, 0x1, 0x8d5, 0x3, 0x2, 0x4, 0x1, 0x3, 0x3f, 0x40, 0xffffffff, 0x9, 0x3, 0x20]})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0xc, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010880)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
dup3(r5, r6, 0x0)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000300)=0x8)
sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)

06:43:41 executing program 2:
io_setup(0x1000000000000003, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={<r6=>r5})
getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
io_submit(r0, 0x1e0935d5, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}])

06:43:41 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @null, 0x0, 0x2, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0})
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0x0, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x44a04, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @dev, 0x5}, 0x1c)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
sendfile(r3, r6, 0x0, 0x8607)

06:43:41 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffff7f00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:41 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x200000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1781.523466][ T9854] tipc: TX() has been purged, node left!
06:43:41 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1781.778737][   T27] kauditd_printk_skb: 11 callbacks suppressed
[ 1781.778774][   T27] audit: type=1800 audit(1580885021.924:3812): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17154 res=0
06:43:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd2, 0x36a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000})
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000140)={0xfb55f50160f0b4f0, @bt={0x0, 0x2, 0x0, 0x0, 0xe9, 0x2, 0x3800000, 0x8, 0x9, 0x8, 0x3, 0x7f, 0xffffffff, 0x3, 0x1, 0x14}})
shmdt(0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x422b01, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000002c0)={r4, 0x7, 0x9, "a22dc5bcce91fe41e4975f7790c9fa2912e2108a41368bf43acd4924e9b3c0cb3fa8df5f030657f8c8ae391dd628644d2a02"})
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)

[ 1781.909451][   T27] audit: type=1800 audit(1580885022.054:3813): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17201 res=0
06:43:42 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffff7f, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:42 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1782.380795][   T27] audit: type=1800 audit(1580885022.524:3814): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17121 res=0
06:43:42 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:42 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:43 executing program 4:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a38a00000008000000000000000008000200020000000800"/34, @ANYRES32=0x0, @ANYBLOB="08000400ffffffff"], 0x34}}, 0x0)

[ 1782.876582][   T27] audit: type=1800 audit(1580885023.024:3815): pid=16813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17202 res=0
[ 1782.969899][   T27] audit: type=1800 audit(1580885023.054:3816): pid=16812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16737 res=0
[ 1783.055080][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
06:43:43 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:43 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:43 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:43 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088641fffffff00003f00632f77fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28)

[ 1783.319765][   T27] audit: type=1800 audit(1580885023.464:3817): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1118 res=0
06:43:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000380))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB="c01200"/16], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r4, @ANYBLOB="000000bf07000000e3d9665649fb424445298712e466aa2b2f757df61efa971cebc6d9daf74d6556d8353a124aa31a016e44542ea78e406773a81cfac52c4f7e66eaf3405d0c2b055e6892669d7100e5729a661c589162e4b99e584bbf02188813b5e0e5a47af355ced70095a2f3a19257c12ce7e4aec234d11cf6b08a133a630bc47f90e5abfde017def70d9f384f853e5c132d8700"/166], 0x20}}, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x40040, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x12, 0x801, 0xc96, 0x9, 0x410, r7, 0x1f, [], r4, 0xffffffffffffffff, 0x9}, 0x3c)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0x990000, 0x7ff, 0x8c, <r10=>0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909e3, 0xffffff6f, [], @ptr=0x3c}})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xa, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x1, 0x0, 0x2, 0x1, 0x50, 0xffffffffffffffff}, @map={0x18, 0x2, 0x1, 0x0, r8}, @alu={0x0, 0x0, 0x1, 0x7, 0x8, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x5, 0x1, 0x0, r9}, @generic={0xfd, 0x3, 0x1, 0xff, 0x5}, @map_val={0x18, 0xf, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r11, 0x0, 0xe, 0xfffffffffffffefc, &(0x7f0000000140)="917b38622c82cd626df641c1d95f", 0x0, 0xffff, 0x0, 0xfffffe9d, 0x47, &(0x7f0000000180)="77001000008c1831a410b3f93b680c332e84fbe6011a176ac612a8da5098214620e9ea8eb6a0a74a20", &(0x7f00000001c0)}, 0x28)

[ 1783.448182][   T27] audit: type=1800 audit(1580885023.534:3818): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16673 res=0
06:43:43 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffffe0, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1783.553648][   T27] audit: type=1800 audit(1580885023.634:3819): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17009 res=0
[ 1783.555252][T16942] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1783.598016][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
06:43:43 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = dup(r2)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f00000000c0))
ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000240)={0xffffffff}, 0x3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4})
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x81)
ioctl$KVM_DEASSIGN_DEV_IRQ(r7, 0x4040ae75, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
connect$inet6(r10, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r11 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400)
r12 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00')
getgid()
writev(r6, &(0x7f0000000080), 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r13=>0x0)
ioprio_get$pid(0x2, r12)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000))
tkill(r12, 0x1004000000016)
fgetxattr(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
close(r9)
dup2(r11, r8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x3, 0xe2fe, 0xffffffffffffff81, 0x4, 0x0, 0xffffffffffffb1b0, 0x10000, 0x0, 0x3, 0x2}, {0x716, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x4, 0x1, 0x2, 0x6b74, 0x4}, {0x1, 0x2, 0x1406, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x83, 0x8245, 0x0, 0x2}]})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
timer_delete(r13)

06:43:44 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:44 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1784.286307][   T27] audit: type=1800 audit(1580885024.434:3820): pid=17062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16561 res=0
06:43:44 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1784.389470][   T27] audit: type=1800 audit(1580885024.534:3821): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16673 res=0
06:43:44 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xfffffff4, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:45 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x600000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:45 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:45 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x2000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:45 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x7c, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200008cfe0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00a0c5008500000026000000b7000000002000209500000000000000a5c45a695ecbcaf2b8e198452498a0328870350a5368c03f1bd8c37784ae4eb241100a1304921fc6070200252b47ce97d5aa6e18eecafbb6b6b59a20c125af2a2169719e93e4d9960a71b3e52506794a3afef7d738e7928f2e4ef01890c04b3364d07e0d8f4e71cf53c91be6b9f8345f1755a1125895b1399807cfee2b6395db8f35a0dc420c732c71f0f56e1bacb6e91ec59d6ba000b4845b1658cefc59b2abdab83859546b52423b155687afc22bfd7c3f91e279de7119830720faf9298d1da8ac72786f703512a9683e53119caf5c11302fdf8c9ec9ce1427c7688c8eabcfe7b642f43f1d5a0873b7d8ce7180451e21940000006c1b0b3a63e1a7c3b9e02305d88e993ce667570f0000000000b94d18bcd61f83148372b1f8155e632cca10c6faeb25a28000000000000000d503b06c5408ef9348d1cc87f04543a1714f734692a1237d397b6bc8d1093bcdf614d9cba82f532b33444ab10b45e3e30e812bdea1e66ab057484021988ce12e0d21d4fbbe4a531d9efb2ca355baf099bef1292b3408000000e6cb14c3770e9cabff01f764cce30bd5b07f86af3fa98c8f219adfeaf6d4f291a978ad363a9b6ed45df445f89005dcda8a5429cecd9c20f0d24271ab7d5bc8dd945d3cd43283a0e99e7f536bdea463ade6d75634b402ea1cbfbedbc79113139aee9f2405b4aba705b3620600642f0f1161f86e89dfc3c0ea4033903c1241313415624c4475c728ca8fcd1d7a78d76f15f4db85eeac19b2315edad5ce9b3ba96441e19ef6b3feac4cc2bfc6ef87b00dcb3b4f233c1f35140aea219c9d378b3346e5e22c81db2db8d7b7bd65dfa2a516f7d47801fc63844fabd7a1567e4c3cb6a2bb60c1baad8b0f9ee50663447704cf6a49627af72496ccbd00ddf5eba89260254c41826dae5aa722ed81f25e485323566343143d7e6e0fed56120229956cb9093db4483769cd5a87fec05c46ad2972ba47c55d6602a17592950dc04174cf39c226a55881ba053d5637acaa87c1310709bd49d33b676261d4174ec2d34d076720b484c64c97b13a77413ac9cc368fab17151bf4d5a5ead4a308c619ff1597209fc6927adee87e52944679f0993ce6a7b54c3b43574c4e0a73f06d3aeb2e3c37d1efa1753bbe362461e69bad9a20496e7cedc8b932ad94992107fc89f8074efc69d44ec9bcd42ff1af93e0b4c481e7ede01b350accf1003aeedc7b75951aa7fc7be2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x100009}, 0x3c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x4, 0x8000000000004, 0x1, 0x0, r1}, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x100000000000000c, 0x4, 0x8000000000004, 0x1, 0x0, r2}, 0x3c)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x15)
connect$nfc_llcp(r3, &(0x7f0000000780)={0x27, 0x0, 0x2, 0x0, 0x1, 0x1, "492f32a329f5be5e9f2cf6add75ef9a535fe9b128b96fb145722c01b3dcf014a434315b16a37da37df7746e36af26b91a270dc021d97081c45d93fa7317d35", 0x35}, 0x60)
r5 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r9, 0x4, 0x2000)
r10 = perf_event_open(0x0, 0x0, 0x0, r9, 0x0)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r11, 0x8, 0x70bd2a, 0x25dfdbfb}, 0x3a3}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r11, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040840)
close(r8)
splice(r6, 0x0, r8, 0x0, 0x4ffe2, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x18, 0x7, 0x9, 0x0, 0x6, r6, 0xd9, [], 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x3c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r12, 0x28, &(0x7f00000000c0)}, 0x10)
socketpair(0x1f, 0x801, 0x1, &(0x7f0000000e40)={<r13=>0xffffffffffffffff})
accept4$rose(r13, &(0x7f0000000800)=@full={0xb, @remote, @bcast, 0x0, [@null, @default, @rose, @bcast, @remote, @default]}, &(0x7f0000000840)=0x40, 0x80800)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc89}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x5c}}, 0x0)

06:43:45 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x700000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:45 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe824, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x7a05, 0x1700)
syz_genetlink_get_family_id$net_dm(0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0xcc)
r4 = socket$key(0xf, 0x3, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b058ff5a08f10781a79c258d415c82612a39420d375ae8f6a"], 0x200600)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x45, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8ab, 0x4}, 0x0, 0x66, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2)
pipe(&(0x7f00000001c0))
fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0xfffffffb}, 0x8, 0x3, 0x1, 0x5, 0x21, 'syz0\x00', "2411319ff5e16319aa29bf86ff495c0f51162c6863882a76fce12b0288b66bcb", "c8d2e173c8f46fd81a87521adddd38b324c311e9228cf1bad749c7f58e8eb4b5", [{0x40, 0xb1d7, {0x3, 0xfffffff8}}, {0x7f, 0x1, {0x2, 0x20}}, {0x3, 0x200, {0x3, 0x3}}, {0x1000, 0x6, {0x1, 0xff}}, {0x4, 0x2, {0x1, 0x3}}, {0x401, 0xff01, {0x2, 0x1}}, {0x7, 0x20, {0x0, 0x3}}, {0x1e, 0xe8, {0x1, 0x5}}, {0x5, 0xffe0, {0x3, 0xff}}, {0x8, 0xb34, {0x2, 0x6}}, {0x8, 0x40, {0x1, 0x2}}, {0x1, 0x7f, {0x1, 0x2}}, {0x5f, 0x9, {0x3, 0x6}}, {0x2, 0x8, {0x7, 0x8}}, {0x20, 0x4, {0x1, 0x64}}, {0x9, 0x3, {0x3, 0x8000}}, {0x4, 0x8, {0x1, 0x401}}, {0xfff8, 0xb088, {0x2}}, {0xfffa, 0x7fff, {0x3}}, {0x3, 0x80, {0x3, 0x1}}, {0x8000, 0x0, {0x1, 0x5}}, {0x7, 0x965, {0x3, 0x8}}, {0xff, 0xffff, {0x0, 0x8}}, {0x4, 0x16, {0x1, 0x5}}, {0x6, 0x5, {0x0, 0x5}}, {0x401, 0x3, {0x3, 0x8001}}, {0x7ff, 0x6042, {0x0, 0x16}}, {0x1f, 0x8b49, {0x2, 0x3}}, {0x81, 0x857, {0x0, 0x4}}, {0xffe0, 0x6, {0x2}}, {0x6, 0x3ff, {0x1, 0xfffff6e6}}, {0x7, 0x7fff, {0x0, 0x3}}, {0x8df2, 0x8, {0x0, 0x6}}, {0x4, 0x9, {0x3, 0x1f}}, {0x1, 0xff, {0x0, 0x1}}, {0x1ff, 0xa77d, {0x1, 0x80000001}}, {0x7, 0x3f, {0x1, 0x3}}, {0x8001, 0xbcb, {0x2, 0x10000}}, {0xffff, 0x1, {0x1, 0x60}}, {0x9, 0x10b5, {0x2, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4085}, 0x41)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10)
r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x40, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0)

[ 1785.637600][T17199] IPVS: ftp: loaded support on port[0] = 21
[ 1786.233472][T29582] tipc: TX() has been purged, node left!
06:43:46 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:46 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x5}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:46 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x2b76ab4dac000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:46 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x10000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:46 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(0xffffffffffffffff)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x64}}, 0x0)

06:43:47 executing program 2:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8)
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x40, 0x1, &(0x7f0000000140)=[{0xffffffffffffffff, 0x0, 0x8}], 0x2a20080, &(0x7f0000000540)=ANY=[@ANYBLOB='nodatacow,ssd,compress,noautodefrag,mask=^MAY_APPEND,appraise_type=imasig,func=CREDS_CHECK,obj_role=[[GPL,uid=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r5, @ANYBLOB=',euid=', @ANYRESDEC=r8, @ANYBLOB='\x00\x00'])

[ 1786.887295][   T27] kauditd_printk_skb: 5 callbacks suppressed
[ 1786.887319][   T27] audit: type=1800 audit(1580885027.034:3827): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17310 res=0
06:43:47 executing program 4:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x64)
r2 = socket$inet6(0xa, 0x2, 0x0)
eventfd2(0xd5, 0x80400)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x200})
r4 = dup(r3)
ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000280)={0x2, 0x4, 0x80000000})
io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000400)="336de335e3733aa69c018c847f4a662f3871fb96739f16a5332383d17a30f19cb5eaecf75e", 0x25, 0xd0a, 0x0, 0x3}, &(0x7f0000000480))
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
sendto$l2tp(r1, &(0x7f0000000200)="d7c5a315df939400a990e06d78ad057d014a2b64d5b360c9c9cea2e2ee1d73e2af661823041e22a03d7f9c21fb8f706366f28875496efe1f40b759c70145ab86c042de0b353930dc98a957b580b52539e362852c62", 0x55, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x5, 0x3}, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe)

[ 1787.019933][   T27] audit: type=1800 audit(1580885027.034:3828): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17313 res=0
06:43:47 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:47 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x4000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1787.242455][   T27] audit: type=1800 audit(1580885027.064:3829): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17312 res=0
06:43:47 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1787.421665][   T27] audit: type=1800 audit(1580885027.564:3830): pid=17344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17281 res=0
06:43:47 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x40280, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb7df}}, 0x0, 0xfffffffd, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1787.510921][   T27] audit: type=1800 audit(1580885027.644:3831): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17310 res=0
[ 1787.613169][   T27] audit: type=1800 audit(1580885027.724:3832): pid=17383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17315 res=0
06:43:47 executing program 4:
r0 = socket(0xb, 0x80000, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
mknod(&(0x7f0000000500)='./file0\x00', 0x200, 0x10001)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0)

06:43:48 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x80000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1787.965890][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1787.983913][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1787.999366][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.016061][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.040273][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.076141][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.108245][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.143080][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.157689][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
[ 1788.201238][T17460] kvm [17458]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
06:43:48 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:48 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x401f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:48 executing program 4:
r0 = open(&(0x7f0000000340)='./file0\x00', 0x60040, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r1})
ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040))
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={<r8=>0x0, @local, @local}, &(0x7f0000000080)=0xc)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r6, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x179f, 0x9, &(0x7f00000026c0)=[{&(0x7f0000000500)="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", 0x1000, 0x8}, {&(0x7f0000000280)="6392805d4a0a663308c7d0466dcb5ba7fac5604aac231df36f4e41bdd410de286bc036bae481d9bdd03d91dc4e935592deb789ffafbe6a7dcbb5d75a3ac3f910d81075a71a48ea3da5fe29e58403264a0576c6c59230a4aa866723fe173d21651c9f29d2c1980815eb698d420b323e8ac5961d6e327d3861ce64513131d119e5da10519757d3fa8b0b", 0x89, 0x80000000}, {&(0x7f0000000340), 0x0, 0x4}, {&(0x7f0000000380)="abb3142dcb2cead28db09c20e60546362ac80b5294f07afeab12d4be332f9172725017a4f0137262140aabedc9c1f7f60ae67ecf147cc74ba20b624bdee8ac0946481c5ca5d36cc6499c53b2dbd2e0e9f2205cd67e0b8e", 0x57, 0x5}, {&(0x7f0000001500)="065e332c87e89617286430aed65016d9f1e0748c83b1fda330eb226396f1a2d49804a8de05e1d4aec08eb8328af524461f548212b9541095bb8f26673ecac954de5a24cf11f9dd9c3bf2ac56c5d752549c84a6552e309dd0bffa1f59916a4bb413a4a6d69fca71fe4cef110925f33c235ed00cad57d03d45f0050e3ee66bd3cf9f7ee934cef587c5942498661cc48bfa49afc51c65b510c6d8e9fa32efc8fd4645a87b90e8540ed31e85bb4a29ae52fd3700db2f2de919df3e9cb73466f8c6545ffe140fc911f0bb010064a77e022cd9471be83aa66d2778de64bc0f8c599c45998add09484783e612abe4a6386b1620130e19b1d87f107b5a1791fceeca2343c31ff0105cac70bb7516623ae451154c43ca4ad2fe31451cdb4ee7cd250df638574276f9fbbf22abafdb757755ed079a6e713d468ac9e793046c23c87b52f6a5110a88c7d39eb4e1b51927258ee4886dcc5b9fda0fd39cd4b0a81dc08cf77ba5760eb7cfc7cec32634527b7ca39cd07fbddb74ec436a2518f8114f5cb548103092ac11ca8167ae65b0b13bc8236844909fdc10c683614b19a44bae9816db2f08c5fe861f5629ae209ee95fa14d38b23aec43d16014eb7b59d8944b81dd5953fc849e23d9466b0b7ffcddc689f5ff01dc40c98b561bfc507a80971ed2d9fc3b8da7ac6c196c78870c52eeb6536760542850c58e2684885a56d9c2f4f2bd37f00777bfc12edea3abfa4ee7c82d1dd5cf697aeee7fb62f19ceab9212837f91781a6bfb61b6176ef44b77fef5893baeeceed2f6229f5c8103be9f751e7d7c234d5b4a4b5b95aa32f9d54594e08777b5624d68f042ae59d52a9432e6f65772f1b5b8fcb008827c2a6eac438e056f311a3d06d86eb9b3a81c472f31256b5116e4670688465b979ce1719e5a7b043d952da8f308415bfcb1e92fd6af4d6197992ecbc23eac4ac22bf61fe860c51a173706830cb8c6c54b550f4fa6e1bbe42f10c99ecc6df931a702a86e9c748ea9d70741a7db1cd904b7aaa83b0fb840a1cacf5c8cea05b2afd5a4ca2c2e49f19fe3b9765f6843c6cc9d2ce7c3f5ff64d21a61b64a799d0cb55767b935b78dc950c1da01035280753efef17f783ea97061c2f25e3292f678ffeb10d52ac9eeb1ec9a73925f0c8c1a7f0c1cf9e67231c3cfee5ec563368770c6b713c4cf74e95dbf72043d954e9c2bd6692dab3abf76ceb4af7419e9ae8f57f1487920d0d1f5991aa49c945689e5915d3875807c3c51220ae7b0107dc28b0fde497faa47021cf87cd0bfe76e0dfdac2ac4443b6ab1e51cb79bf2b4880a03a0ddc9269d374b2831cfca75d1b59897f8a9ebcf55b35ae2f29122e6aec0da6da443b1c84141b2ec1963be68ddc18aaa1537f5ddb509fe2d8974753b9854a0f5ede5acce258e961adbfd33f1439596e7d6cf181bc97bc66304db21416c66dbc83c38c20fb7d9dde4955ef6edece9f93dda22c6a62f7ec340d2716ea77f40db9c62b2d355b22777fc75e8f112e27c06af8f3e619ad5ecd2d360af1a3a375b297752ec15d3a56abb912d28f6645417f832e0633f0f996a2d0108acdb55834e0cca984eb453686adf9df341867cc110714d6dd7b76782ef8c74081c8a4614aeb2754757749769dbf43b56bb3686ad0f50b8ad9f2aca8368e6773b75f903fd42a8494941c4f74e00a056c5a42f415501f0fa465f379e51216a222e8942cc3b8ab258908b26062e0206d8f861c23d13b5a9491767fbde1f6082d8577a7a92cfe449d105bcd4e75f53546931c70992d48b6cf241ea9795fdfc2de37c638662cd05d4432298eb1e2ba1ec9b8d2c1237c4692fa28d879dd14f5ecb99c8c46fb07cb947e26f71257f04bbe341faa988b04f4a5da4a12a6d7b90b1efb89e40a84dafdc71b95f54e32bc70436c473445880899f9ef043e008fda79b6a1073479abcaecdb4f4f837daf83550f7f661da76ec68d5ce8209874033db9704500fb633e4bf6406fa4d58f88c924cde3e5092902c95113adcf453746e8ddc1db7fb450a0bf9e386c17f64a2ef89f8523426bd7a26994bded42fb26f7021fd877f0b7518492b039158eb9ec8586f2316f34cc325d712b57053a5c8f0a6825a6328d3d011e2bad630a91760d7a615118d7b55382a61f0ddd1f5fbc9f1004201387120cdb9ce2aee9f0dd01b1124dd39146fa346e96828659dcced1e5840d17684df2ca002c0f8aed6c3e64f4fdf12f23ad4fd772d4d7207536d1a655eea78f2e97cb66fe51104f0404b9a5df8830a36cccba5d231fbe346b448786760aca79d673baf9485b4e76567db3905efc0d7758fff7f6a358796980b8f17ceddfa66f8a1ca77c071f62d34722134dcecf25b43838a38f0d92650c6038638aee3de7975103eed7accc777ce989dc90a2719c9397d3ae0e1a95e13e2266734ae644c59b7095ae102130d74a6167712e415d7db019b8ab081f1d959ac510f3093065b47eba71f1fc7193a85d53ab7ab2a606a827695b9d40a66cee20b8eee48322b6b1efb98c8f14e3c27a4a9272b37c0c13f10f2580e25501f1ec01bd8e56d07a96256376b42e8f61314f2dabe3e4803248652d84f7d30fedd167691e7fe2be21d5f3f95ca924f7819fd21cbe85919ef4cae3dcd5c2b43cff2c9ac71f2922621f3e68f281a492f3c350ef1b789e6e163859c4e9428f457b1cc5a2e0707e552c6e73f2f930f58b3ef1ab230ee7a7b004d3dd2b65a3a9c740070c1308ad9235b92487db44afc21cae14e88f2c27f62eb1bcabad2a039838335fb566706ceec7dd207deb52359e0727bae582bc8e71eaf1f9699ad51ad6b3557ee7be333281ffe5317e16eef619b30f476b14d50a69e58292f9898162a07b1bfe3ae5bc0b22f0b1f88fe36903e810ede0660a268dd0e42eb21b553613fcf766b74d573837d56ed9730e33ca86153733d994a226174b474356018856d3aa8060edd35ca632e640748b9a6e0b5f1235d52d187fca74b0f5f03883270cd111fca79ea1adb03b1d4231aff9eaf764e8ce90d8e1da84b7fc2ad3756c12fa397cd9008a46d649f8466f539b45702d36355945a72c508f4dafe349295fa216a780cdfe12c9cb9945b94e05f37a6c5afc6f0fc691185b180c67371442542b48106a2040cdd31cfb71af7da4bb8724849dbd92818fae2bbcee1f7e26d92df444522d94aa7f344e037580edd7d1a0d924f1c253bb75e0ba055645cecdb557324f269aa9c1a2ac77740e6df3d4bf7991db85517728e876b7ce45e7b2932295227b3db1f72b83c2a52c8d001acb7378b7c6ccc10c19968e97b99fa903af37f1bf4d82321e56516e2f67360a5577a80a8042c8c5a7f2f49531b051ac98e77a34c2d767fd52db421c3837b9583318a6e973e0986026df6a18eb3f22ee9a4e45a1080f77463dd081c5e398120ecda4699ad088ae670b3a32d973812dddc7a19c0072f5250a4446170e956f0f306e051f1d59ffbfcb784e9ee5e58a1ed65843cfd757421cb1ac0ff22ce07a412ec95652aa47adeca35ee391bdef9499dfc6b5fe80706613e338af46328e9c3b434bec99cc272539de6b8655a34336aa2684c0b5fc057dcdb8025bc788e868988bfff355909be1124348bdaa31d99f6b3c1eb07f6ca39474bd84d6de4ee623bc0dc4d2100ee8571944d9b110067e339e77f214350d4dd19d7f178a0054c2ca3a9f8f342d4ddfb566364165c1654439d11b8ce871318ce3e344e1a52cd9513cd2425e91765e9dc5bf77eb33414c42c5089d87e533fc2086dd90c7dd2dc151221490c80d5d786b8e24af7a166524ecfbe4595123a6f2f1a4332fc8f90e8e80a6686d51533c0a0bd2075ae0725f96d9091f0520a68846292a11bb7316ef4b9521a86108083cbacebb2aeb4185f1cdb098776b023fc364a58029c6a4e82a6707e7db083362fa6eada79b6c29e0db97c2dc4b1f8d744c3be2cea606dc7e4f213c88f0f92c783b225702eddc7e947423a1f4cfcf9f414880d8ac4c32841691c62c4a4fe8e1da38a3f04152063e1484090bd5423b339e0005523a84aeef59e65e09f4b38b4fc3b50e313e94f03b8c6abb5a1910096d448c5f9d064f10f7e31139da52a6c5ef4b62020d11345a6dc91ce4a8972385d6812698d9da77b7a26ff6e779d0c62368fa5debc2ec48e9a95e6cc57af1cc183f00fe1cc5edc04205cc85948b220539d1f92e2635ba6ada21bc8e3f3ed2530054cb87fee172d05a36228e97ce9261521dc790fc27c28b379bdd2fdb8bb81042af4da944c9460167bbc34ad465c3a644106cda93ec53e83501d6c29de934c4a3aacf626c64d2b2e0b340ee7006d10cb924ac92a53ba29a1f547b6435ab5b5f483cfc4f926473b399eb71c0549de2239926f2ec8f2dc54faa1615d3805bc52a159ddf5aa80a04258bb6854613a547188e28cc6a272a8b18f03445fd2995b41b384c05c0ba8bfef7964b02155324f2a40ffdc2d42741af4998cea115ebd8468ec5766fb8059781cfb9304b17030865a4e858e68f0ef0f31f5168b275741a1748b8379d07abbc606c5f73aab32e8fb5905b4d6c4dded12c2302a7c732c9cd5d3e9222422bbb0a18fe4b804e95e07b1114b192cb2a24c4a0eabb8e786fd15dd630e83851c3b18204525215c99e81fea048d94f0dc514d3edf57c7e20e737cf491df768b65ecb382082b12e0f64424451a216f6e6d96e3e6b2c925312d6c87a25d62d60adf3bbd04c5d0d3544c6f95653bc675078b61e4d8f5ef41edd3f71ec144e26d9ea569110578bf393407cdb6737ce5e78974d0750a6704e6b911c08f0f166a60275084df6d192f56f836739b185ad47b0882717bd79db762abf25b647f4c244514543add48de2cdae5f684136272e6f9fae13a947e9880ecdb55423d84aa0d88658ebe24875a10fab4e117e69cea3987cecac39e95150a7ecde660d47a0befd9fd9ccebe4213c1be6b9000c1c73222ede844538cc3e726b149c323e779f96ea32b86303ff3c578d2b845fe8a224f999e3963c869ecbedfcb1818e1972cab888d94e298b029430fb4803b57359d583eef097dd9385a2faa36dbd4ea3159752f7e17ee4bbe10fc662b5e2aaa55adc78f3f4f1a91a7d5c83f9ea651f52b267966cb4fabd7f644ff71ab869b1a43592595e92b37e43e4f98d8cc955dd650f2cda782ddb04b1d90287248e5a0223d9fcab8a53941a43ef90f0e770d3b9139510ceea43001a8c8b7012c7e7eb13c3996b8de9363ed471732338f8e381dfc307613dcc4efa571dad6c753f9313c9fa6af1d9c9a4f080166e6165d654a977a7338407ef9d3ca73838e1e79caa01318b00ecb0bbc074010e9b2db90bbdfba5d853aa39999d968adcba9cf7a3b62c9f3aa31c87efd1c2c754f61e8ec040a0f979ffeadd3137eb41f9e70a2a61a764b01ece022505f5272cfbb82696d7c37acd82d09867a5311c52e7ac84ee7af2039ec9b52a48e4c20ba3a95bccca54da24b3087b8bc4b145b8a22c1fd0af99c289e61ef2fa40e6797a0e906d5acb753b9fa081ee528ac214f07fb66367aabc9b2e9821b7b242d15f0749431d0695da3665227d49af290b384650eb904d9e262b37cc106751771f62fa1e681cea6531a4275d00d8e79167d38dcfe5c8fe16cb385f5d47fad6bfb5639c01a8c41ebae1d1b01bb9ebd097db3ead3d77e80056d45abce2292ce1ccb877c55464b11457125bd0b8797fc33101000322d59c7dfb676a253ddb00811ad848b040d1c643aac4590b4f778544f40d48bda410c9982d3a0f511f6247a282591de3252b4a37b217400e72f8bf8d00c5", 0x1000, 0x553c}, {&(0x7f0000002500)="e9f6f3c6452a76541f251eef0217244215684c157b9c260fa2e5b359f5d8390c562c7424a848813f40f70dcd601a51a358e8ab831a34a30610259d561479f012fa5772407b59f18405595e0b1879ead2adb909aa244f44c22b52e3694abce00a7d59c2a31efce261ce471346898b4b897f77fdbe2b19207983b813041d9b56cc92923145241a51", 0x87, 0xfffffffffffffffd}, {&(0x7f0000000400)="c56d73d54fec90684edbaa4b42493bd3d4f4b6975bea", 0x16}, {&(0x7f00000025c0)="c7a813cf7839fbcb10b89251dfd5c4db3ffe6f9351e50dac6840d57495f8d475dfe949e9453c3d4d69d29fceee3e3c823ed82306ba685e0d99fec9d313712f6e82e387f852e74f922096c51b5d0c32d35d18729973e56f49c039dfcfad3fd600fe78369cda932f8c64dcb4530fbb1dc2a62fb65fe532f03be63d637b06c174749996d1b30c410aa55b938a7b264b226f75c5cb70715b0db07841619ebe36bc74198e4672e292be187197abd9308947d8fd1c17b487d701ed6d30f3ed1ef71d37446f70e986081e73e9d69f0e819ff6ac091272697c79b7e338a628b0e6de848940bd3bd8bae41c", 0xe7, 0x8}, {&(0x7f0000000440)="8812270eb9387d1fb6a6aef4daab6be23f2579af5e501da4dfa29431", 0x1c, 0xfffffffffffffc01}], 0x40030, &(0x7f00000027c0)={[{@tails_off='tails=off'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@nouser_xattr='nouser_xattr'}], [{@smackfshat={'smackfshat', 0x3d, 'batadv\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]})
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x90)

06:43:48 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xa00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1788.507827][   T27] audit: type=1800 audit(1580885028.654:3833): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17281 res=0
[ 1788.589091][T17580] IPVS: ftp: loaded support on port[0] = 21
[ 1788.647193][   T27] audit: type=1800 audit(1580885028.794:3834): pid=17592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17319 res=0
[ 1788.729908][   T27] audit: type=1800 audit(1580885028.844:3835): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17322 res=0
06:43:49 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x10001, 0x8, 0x4, 0x40000, 0x9, {0x0, 0x2710}, {0x3, 0x2, 0x5, 0x80, 0x33, 0x4, "225e2d1d"}, 0xffffffff, 0x2, @planes=&(0x7f0000000180)={0x5, 0x1ff, @mem_offset=0x6, 0x401}, 0x3, 0x0, <r0=>0xffffffffffffffff})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x400, 0x9, 0x2, 0x55e, 0x3, 0x200, 0x11}})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = getpgrp(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xae9a, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000006c0)={0x2, [0x400, 0x2]}, &(0x7f0000000700)=0x8)
r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000))
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
userfaultfd(0x80000)
prctl$PR_SET_PTRACER(0x59616d61, r2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000200)="1604e6338efebef55acd108e22026005c1ba2d04af3b6d6c874de3bcc8c6878a63b5cf77dce104281c59900c5c54c9c416ccd60295e52c8373e05adbb2ab87ceac3bd47094cde7dab102e0feedbe6097d84923f65a5300fd2882bc5d74729c6e66334109703b8895a0b6899a9e1ee5ce8467f81a16fc74e64dadd7a4675b099dda66446f4a0d371e71c3136198731a79f38b3fad253bae7075b9e64476", 0x9d, 0x6}], 0x4801, 0x0)

06:43:49 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x100000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:49 executing program 2:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
read(r0, &(0x7f0000000380)=""/233, 0xffbe)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

[ 1789.253610][T29582] tipc: TX() has been purged, node left!
06:43:49 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:49 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$isdn(0x22, 0x3, 0x25)
fcntl$setsig(r1, 0xa, 0x8)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="8a943793061b676e1b3ddd96499a00cafce86f1dfb0506e36614d262e8ba71969e952e244a851d1703c9b2a28cfda5acc445c6f46f2aab5be6ead9737bc0db1e164a62ab459737e9c4f925be80d00afa40d495c233a1656dd506945c0ec44050ed", 0x61}, 0x1, 0x0, 0x0, 0x80}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000018000100000000000002000000000000010000000008000c00ac1414bb0c272544810b397e69dc780ddfdeb17f512c9e211e67000000"], 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000440)={0x8, "ae100847d83f2ae3e59198c14cd9d95e1a49bb9e897a2ac1e13725b10c51fef8", 0x6})
ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r7 = syz_open_pts(0xffffffffffffffff, 0x181200)
ioctl$KDDISABIO(r7, 0x4b37)

06:43:49 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x10001, 0x8, 0x4, 0x40000, 0x9, {0x0, 0x2710}, {0x3, 0x2, 0x5, 0x80, 0x33, 0x4, "225e2d1d"}, 0xffffffff, 0x2, @planes=&(0x7f0000000180)={0x5, 0x1ff, @mem_offset=0x6, 0x401}, 0x3, 0x0, <r0=>0xffffffffffffffff})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x400, 0x9, 0x2, 0x55e, 0x3, 0x200, 0x11}})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = getpgrp(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xae9a, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000006c0)={0x2, [0x400, 0x2]}, &(0x7f0000000700)=0x8)
r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000))
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
userfaultfd(0x80000)
prctl$PR_SET_PTRACER(0x59616d61, r2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000200)="1604e6338efebef55acd108e22026005c1ba2d04af3b6d6c874de3bcc8c6878a63b5cf77dce104281c59900c5c54c9c416ccd60295e52c8373e05adbb2ab87ceac3bd47094cde7dab102e0feedbe6097d84923f65a5300fd2882bc5d74729c6e66334109703b8895a0b6899a9e1ee5ce8467f81a16fc74e64dadd7a4675b099dda66446f4a0d371e71c3136198731a79f38b3fad253bae7075b9e64476", 0x9d, 0x6}], 0x4801, 0x0)

06:43:49 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x4d01000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:49 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xb00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1789.570669][   T27] audit: type=1800 audit(1580885029.714:3836): pid=17815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17317 res=0
06:43:49 executing program 2:
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000640)={<r0=>0x0, 0x82, "805340c3bb4067b2f80e167711191249c675120f81ca1888375d5e1ea6951bb9dedb1c11ddf0f4f5bce4d7d22a16df49729a01e9b1984c60839185b862c4180251ee0fbcaa202a3707bda3811b7c6354e4828473a3441cbd6703ddb4d04f8cfc79752cdf8f6f9f77d461ae1403bd9e8c47328e00183e04579569bef53b646ec65a8e"}, &(0x7f00000000c0)=0x8a)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
readv(0xffffffffffffffff, &(0x7f0000000140), 0x19d)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x80, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0)
pread64(r2, &(0x7f00000001c0)=""/252, 0xfc, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r4 = eventfd2(0x200, 0x0)
tee(0xffffffffffffffff, r4, 0x9eb7, 0x0)
pipe2(&(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0xa3c8640967c914a8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x7}, 0xfffffffffffffe58)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/3, 0x3}], 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x750, {0x2, 0x0, @dev}, {0x2, 0x4e23, @dev}, {0x2, 0x0, @multicast1}, 0x8c, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x8})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc0045878, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast2}], 0x20)
unshare(0x60000000)

06:43:50 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x10001, 0x8, 0x4, 0x40000, 0x9, {0x0, 0x2710}, {0x3, 0x2, 0x5, 0x80, 0x33, 0x4, "225e2d1d"}, 0xffffffff, 0x2, @planes=&(0x7f0000000180)={0x5, 0x1ff, @mem_offset=0x6, 0x401}, 0x3, 0x0, <r0=>0xffffffffffffffff})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x400, 0x9, 0x2, 0x55e, 0x3, 0x200, 0x11}})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = getpgrp(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xae9a, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000006c0)={0x2, [0x400, 0x2]}, &(0x7f0000000700)=0x8)
r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000))
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
userfaultfd(0x80000)
prctl$PR_SET_PTRACER(0x59616d61, r2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000200)="1604e6338efebef55acd108e22026005c1ba2d04af3b6d6c874de3bcc8c6878a63b5cf77dce104281c59900c5c54c9c416ccd60295e52c8373e05adbb2ab87ceac3bd47094cde7dab102e0feedbe6097d84923f65a5300fd2882bc5d74729c6e66334109703b8895a0b6899a9e1ee5ce8467f81a16fc74e64dadd7a4675b099dda66446f4a0d371e71c3136198731a79f38b3fad253bae7075b9e64476", 0x9d, 0x6}], 0x4801, 0x0)

[ 1789.911296][T17926] IPVS: ftp: loaded support on port[0] = 21
06:43:50 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:50 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x10001, 0x8, 0x4, 0x40000, 0x9, {0x0, 0x2710}, {0x3, 0x2, 0x5, 0x80, 0x33, 0x4, "225e2d1d"}, 0xffffffff, 0x2, @planes=&(0x7f0000000180)={0x5, 0x1ff, @mem_offset=0x6, 0x401}, 0x3, 0x0, <r0=>0xffffffffffffffff})
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x400, 0x9, 0x2, 0x55e, 0x3, 0x200, 0x11}})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = getpgrp(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xae9a, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000006c0)={0x2, [0x400, 0x2]}, &(0x7f0000000700)=0x8)
r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6)
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000000))
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
userfaultfd(0x80000)
prctl$PR_SET_PTRACER(0x59616d61, r2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000200)="1604e6338efebef55acd108e22026005c1ba2d04af3b6d6c874de3bcc8c6878a63b5cf77dce104281c59900c5c54c9c416ccd60295e52c8373e05adbb2ab87ceac3bd47094cde7dab102e0feedbe6097d84923f65a5300fd2882bc5d74729c6e66334109703b8895a0b6899a9e1ee5ce8467f81a16fc74e64dadd7a4675b099dda66446f4a0d371e71c3136198731a79f38b3fad253bae7075b9e64476", 0x9d, 0x6}], 0x4801, 0x0)

06:43:50 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x200000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:50 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1790.529056][T18042] IPVS: ftp: loaded support on port[0] = 21
06:43:50 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xb00020000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x5, 0x5, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0xfffffd6c, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x19, 0x1, 0x0, 0x0, {0x1}, [@typed={0x14, 0x1}]}, 0x28}}, 0x0)

06:43:51 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = epoll_create(0x0)
sendfile(r1, r3, &(0x7f00000002c0), 0xea9)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r4, &(0x7f0000000240), 0x5c3, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f0000000300)={0x8, 0x8, 0x36f3})
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
r8 = socket(0x29, 0x80002, 0x0)
sendmsg$alg(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d8", 0x20000041}], 0x1}, 0x0)
connect$rxrpc(r8, &(0x7f0000000280)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf4b}}, 0x24)
sendmmsg(r7, &(0x7f0000000240), 0x5c3, 0x0)
write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="b68dcd2093ccf1b6be7eb12039f1adb448009c46d38e3a", @ANYRESHEX=r7, @ANYBLOB="80464848a54ad9300829f5b5e29be6c9b3016210cf6cd0f7393ee24aa6f83031b2f295045ec008b5942d2d8492b695056d263a6a960b0a399b13419b59c7e3a1eb12ce8b555af1ac079b90a8eaecff2897a922746bc48957e3368f1786eadbde4e9c03c8ab154f52a52d38a2e40b9f5dc2a6b230395c098bfeb14328e42f4707a41bc700000000000000", @ANYRES32, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT]], @ANYBLOB="574406dd4bc741f25f7a4193c84282a9b18ec1e8a176852f3f4481fc8964064c6412dc232a44ccbce55258eaf4f6ae2e3c7a1d3d61feec045b74fe53195cf44854ca3cb3448b3fe30d7fbbad038d35a2b594b85b7953c386b5a2a09a1e62900b80fe45d31c9159812f7e9d913075fe4b7fdadb4a7d6397b67ad7fc0225d91f36391465557635b752c979153b099eeecd8881fec8edd2a9a70873b6476910b80c2674845bfb80eb03d24bdaa3ed21225a0148175b6382cd8e2647bb25e19b34953d9ea5394ce56063276ca3326e54"], 0x171)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r9=>r0})
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x12)
ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, &(0x7f0000000040)={<r11=>0x0})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r9, 0x4010641c, &(0x7f00000000c0)={r11, &(0x7f0000000080)=""/42})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x5c031, 0xffffffffffffffff, 0x0)

06:43:51 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x7c15000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1790.955514][T18162] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
06:43:51 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xc00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:51 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x6b)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/226})
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000000)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b4bf6f280b77f8a9"}, 0x10}}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendmsg$nfc_llcp(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x27, 0x0, 0x1, 0x7, 0x4, 0x1, "e85d1c863971abf02e5899b5c877338d59cef31f7bbb302bc1453c9b5a40ebc19eefd86ef18ecbddb3f5fc49b0dbaa80e34dc1aa1019880d6b8e9df8ed702b", 0x1c}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000400)="3238b1683796db4c3abe8b1ef24408bba796361762d6c02e21b9f435991df163c8b9096f580280b28011d6040a8dda55e692d4898dd5a461d90726b1ff0f1bb986148bbae58b652103ff5a6854d6c3b22b3b547c5dae397c078f38eee2add5497f5bd0beeadface34781880c63d214f3641bc24ce3b73d2b943748d569701b8d263894886a3e8bbe881f36731e4c599df36ea756f5a538ad107777cf37cad4fd8968c052288777d796c73d3ea86f72f1942331cb293ac1d9d702ab0286d0775e2ba136afbe40974690b7", 0xca}, {&(0x7f0000000500)="339d37ea78e1f662ee852c4274ebcd214fbc5acc27516f86846b514df30829d2dd14b1ef8926214beb18300b7815668cec6df2bf3ee72a2a681f128e67b4d065492961bdf820eb83e12307dceff9f6c5439b9859d8dda38f6519e6edaf28006494f8268717e98f8ed8d407bdbc6a23469f0de13106e80af9bf39ee7d85cc0d74dfd37cec8782adb6709cac5fb6116125c24b8ac2ee", 0x95}], 0x2, &(0x7f00000005c0)={0x28, 0x10d, 0x9, "d16e9351a5017df1baa4088c23fef53e958464fb30a8"}, 0x28, 0x4000061}, 0x800)

06:43:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x13)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
accept4(r10, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x80000)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00k6\x00'], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x2b4, 0x10, 0x10, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x216aa}, [@IFLA_VFINFO_LIST={0x284, 0x16, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffb, 0x88, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @dev={[], 0x24}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x9}}]}, {0x118, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x5dc, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x9c0, 0x0, 0x88a8}}, {0x14, 0x1, {0x20, 0x513, 0xe28, 0x8100}}, {0x14, 0x1, {0x1, 0x6d9, 0x4, 0x88a8}}, {0x14, 0x1, {0x1, 0x5d3, 0x8, 0x88a8}}, {0x14, 0x1, {0x80, 0x5b4, 0x9, 0x88a8}}, {0x14, 0x1, {0x0, 0xe21, 0x3cd4, 0x88a8}}, {0x14, 0x1, {0xfffffffd, 0xdb0, 0x5, 0x88a8}}, {0x14, 0x1, {0x7fffffff, 0xe59, 0x3ff, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x3fcc, 0x5c8}}, @IFLA_VF_VLAN={0x10, 0x2, {0xff, 0x2c7, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x40800000, @remote}}]}, {0x10c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0xd0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10000, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xae, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x75, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10001, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0xb8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x172, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x3f, 0x8, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff0000, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x401}}]}]}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x2b4}}, 0x4000000)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")

06:43:51 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:51 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x8000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:51 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:52 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xd00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:52 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, r1, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x7a6172a430e1732f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x8, {0x2, 0x4f22, @empty}, 'batadv_slave_0\x00'})
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003})
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r7)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)

06:43:52 executing program 2:
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mount(&(0x7f0000000480)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='./file0\x00', 0x0, 0x1001004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x32f88f2, 0x0)

[ 1792.179959][   T27] kauditd_printk_skb: 9 callbacks suppressed
[ 1792.180058][   T27] audit: type=1800 audit(1580885032.324:3846): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17323 res=0
[ 1792.303726][T29582] tipc: TX() has been purged, node left!
06:43:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0, 0x0, 0x8713}, {&(0x7f0000000000)="965667f6ac3855c1d77011b9d284fc2e3a1108a18ffc", 0x16, 0x40000000}], 0x8601, 0x0)

[ 1792.504243][T29582] tipc: TX() has been purged, node left!
06:43:52 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x9a02000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:52 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:52 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1792.858098][   T27] audit: type=1800 audit(1580885033.004:3847): pid=18531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17281 res=0
06:43:53 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r2, 0x8b2c, &(0x7f0000000000))

[ 1793.040831][   T27] audit: type=1800 audit(1580885033.184:3848): pid=18538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17332 res=0
[ 1793.129793][   T27] audit: type=1800 audit(1580885033.274:3849): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17337 res=0
06:43:53 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:53 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x400000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xee46}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x401}], 0x2c)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
pipe(0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x8002)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000300)={r3, r5})
getegid()
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

[ 1793.441124][   T27] audit: type=1800 audit(1580885033.584:3850): pid=18552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17281 res=0
06:43:53 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xa00f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:53 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$alg(0x26, 0x5, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4080, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x23)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
write$vhci(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="026191d19cc7dd4b5bc60c5364371fef8208006ce2f103fe5810b1e3a6a7ba87c6cbfefe6212c8878a4f946633a1349c48d9f9b1ffa918a87258f66bd7e59f30457f129994f2425a6675e0ca633f506ff86852bda2812bf0cc5149f4cbc3c9c6f7ba6bdd4d480cab3bd045b95b530b695d890544bf7c238db728d500"/137], 0x89)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)

[ 1793.683177][   T27] audit: type=1800 audit(1580885033.824:3851): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17332 res=0
06:43:54 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x13)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000002c0))
syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter\x00')
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x6000)
syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0048a9b7bd5bdbaa36355992ba965bfdb8ee"])

[ 1793.841564][   T27] audit: type=1800 audit(1580885033.984:3852): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17341 res=0
06:43:54 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1794.087568][   T27] audit: type=1800 audit(1580885034.234:3853): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17336 res=0
[ 1794.199782][T18679] XFS (loop2): Invalid superblock magic number
[ 1794.212978][   T27] audit: type=1800 audit(1580885034.354:3854): pid=18692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17342 res=0
06:43:54 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1794.383119][   T27] audit: type=1800 audit(1580885034.524:3855): pid=18699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17281 res=0
[ 1794.394938][T18679] XFS (loop2): Invalid superblock magic number
06:43:54 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x200006d26, 0x4)
read(r0, &(0x7f00000002c0)=""/157, 0x9d)

06:43:54 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xe402000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:54 executing program 4:
fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3, 0x0}, 0x8000002}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000240)={{0x3d565073f8805034, 0x0, @reserved="1ff2882a862c6c2ff7068ac813f18fe0dbf060a8505815d64c51818de008a15a"}})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000a80), 0xfffffffffffffffd)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00')
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x80000001, 0x1, 0x4, 0x80000, 0x81, {}, {0x1, 0x2, 0x4, 0xa9, 0x1, 0x6, "5ca1616b"}, 0x7, 0x3, @fd=r5, 0x7, 0x0, r6})
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x200, &(0x7f00000001c0)=0x4)
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000006c0))
creat(0x0, 0x0)

[ 1794.720911][T18714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
06:43:55 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x500000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:55 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:55 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xada4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40100c0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x4}]}]}, 0x24}}, 0x0)

06:43:55 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:55 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1795.171742][T18829] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
06:43:55 executing program 2:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f000000b140)=[{{0x0, 0x0, &(0x7f000000ac40)=[{&(0x7f000000aac0)="c8", 0x1}], 0x1}}], 0x1, 0x0)

06:43:55 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x7, @pix={0xffff654c, 0x7fffffff, 0x47504a4d, 0x5, 0x496, 0x7fffffff, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3}})
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000240)={0xfffff6ca, 0xff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
preadv(r7, &(0x7f00000017c0), 0x348, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f00000000c0)={'veth1\x00', {0x2, 0x4e23, @local}})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r11=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

06:43:55 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x1500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:55 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
mlock2(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff0d5}], 0x8}, 0x3f00)
syz_mount_image$iso9660(0x0, 0x0, 0x8, 0x0, &(0x7f0000000800), 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)='y'}, 0x30)
syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00')
r3 = memfd_create(&(0x7f0000000000), 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r3, 0x0)

[ 1795.783780][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1795.790018][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:43:56 executing program 4:
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x28)
symlinkat(&(0x7f00000000c0)='/', r4, &(0x7f0000d06ff8)='./file0\x00')
faccessat(r4, &(0x7f0000000100)='./file0\x00', 0x2, 0x0)

06:43:56 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x11}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:56 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xffffff7f00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:56 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x600000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:43:56 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x2000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:56 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x20)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x10a, 0x4, 0x1, "2432a52a6468fc1a830184ccc6565330", "84de57d5f622ee67bedd18c55045322dd779700db2911a95d98818c6ba8b3237b85fa0d9976844efe22ac49e37bb266984e8dd3b99925b50747ec9dd78d60fdc80b8e4db243c904ebf11149cf5ffa8296ae15ffed5115f0c2328fb10de2f5ccfecc9bf8ff0599ab9e4f6e3bb34ffbc0aefac7bbba30614e2b80a955b1b0e019da70393d0c54d88381aa8d41008c311fde808029e1ab90a57a6fe66658deea625f53a289caf96a23ed4a0e5e3a3e40c13e5f6799f9d062bf6db3d74c9f710a04a115ef20ab781d8da86b7b38ead8809119d211be9c8bf25657cc3fcf21cea13c84309cf5018b1b7cb5f757a64a475884f729f664320"}, 0x10a, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x20)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x202, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x16)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000300400000ff050005001201", 0x2e}], 0x1}, 0x0)

06:43:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0xae0e8232fbf15c46})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[]}}, 0x0)
socket(0x0, 0x1005, 0x0)

06:43:57 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x13}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:57 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:57 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
mlock2(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff0d5}], 0x8}, 0x3f00)
syz_mount_image$iso9660(0x0, 0x0, 0x8, 0x0, &(0x7f0000000800), 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)='y'}, 0x30)
syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00')
r3 = memfd_create(&(0x7f0000000000), 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x0, 0x2011, r3, 0x0)

06:43:57 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x4000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:57 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1797.584919][   T27] kauditd_printk_skb: 10 callbacks suppressed
[ 1797.584938][   T27] audit: type=1800 audit(1580885037.724:3866): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17348 res=0
06:43:57 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x14}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1797.813309][   T27] audit: type=1800 audit(1580885037.954:3867): pid=19323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17281 res=0
06:43:58 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:58 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x700000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1797.970074][   T27] audit: type=1800 audit(1580885038.114:3868): pid=19328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17356 res=0
[ 1798.155897][   T27] audit: type=1800 audit(1580885038.304:3869): pid=19332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17349 res=0
06:43:58 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004006, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={<r8=>0x0, @in6={{0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10b1}}}, &(0x7f0000000080)=0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x200, 0x30}, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x50000}], 0x1, 0x0)

06:43:58 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:43:58 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x401f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1798.481524][   T27] audit: type=1800 audit(1580885038.624:3870): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17356 res=0
[ 1798.765408][   T27] audit: type=1800 audit(1580885038.914:3871): pid=19351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16897 res=0
06:44:00 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
signalfd4(r1, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

06:44:00 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x22)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8003)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

06:44:00 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:00 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x800000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:00 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:00 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x4d01000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1799.966788][   T27] audit: type=1800 audit(1580885040.114:3872): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17334 res=0
[ 1800.053559][   T27] audit: type=1800 audit(1580885040.164:3873): pid=19368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17374 res=0
06:44:00 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x22)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8003)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

[ 1800.143249][   T27] audit: type=1800 audit(1580885040.184:3874): pid=19372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17377 res=0
06:44:00 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x14d}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:00 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:00 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1800.506955][   T27] audit: type=1800 audit(1580885040.654:3875): pid=19388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17363 res=0
06:44:00 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x22)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8003)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

06:44:01 executing program 2:
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/74)
kexec_load(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000003f40)}], 0x0)
nanosleep(0x0, &(0x7f0000000780))
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
io_getevents(0x0, 0x0, 0x1, &(0x7f0000000580)=[{}], 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x22)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000640)={0x0, 0x2, 0xffffffffffffffff, 0x0})
sendto(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
clock_settime(0x5, 0x0)
dup(0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec\x0e\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000800), 0x10, &(0x7f0000003e40)={&(0x7f0000000680)=ANY=[]}}, 0x8003)
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syncfs(0xffffffffffffffff)
getrandom(&(0x7f00000041c0)=""/198, 0xffffffffffffff96, 0x3)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0)
ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000000))

06:44:01 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xc00000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:01 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000020000000850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x40}}, 0x0)

06:44:01 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x29a}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:01 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:01 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x78881f25ac000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:01 executing program 2:
r0 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c002e001fc41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0)
connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x2, 0x3}, 0x10)

[ 1801.864199][T19428] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[ 1801.896717][T19428] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[ 1801.934114][T19428] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[ 1801.970808][T19428] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
06:44:02 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x7c15000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:02 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r1, @ANYBLOB="2c804623c6fc7adb01ff585fa33f9f09bbccc074ed3501e653aadaf0a3a69aa6e3c435de6d52241ff48943a8478a07302ecd4227e90b313106891d665eae56cf23aa238736f79e115473a9352fbe78cd68be9e04a26f0c6c2fbe3af34074c1aced580bbe67650f905835305de46affbd7570c56e"])
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@remote, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="70e6b3f96273", @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x33}}}}}, &(0x7f0000000380)={0x0, 0x2, [0x834, 0xe71, 0xe1c, 0x14e]})
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
fcntl$dupfd(r0, 0x406, r2)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000300)={0x401}, 0x4)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
accept4(r9, &(0x7f0000000280)=@caif=@dgm, &(0x7f00000000c0)=0x80, 0x80000)
ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000080)={0x865, 0x3, 0x1e, 0x7, 0x0, 0x13b})

06:44:02 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2d1}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:02 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1200000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:02 executing program 2:
open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x128)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000540)={0x8, 0x0, 0x4, 0x0, 0x20, 0x2})
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ptrace$getregset(0x4204, r0, 0x9b62e134edbfc45a, &(0x7f0000000000)={&(0x7f0000000080)=""/154, 0x9a})
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lookup_dcookie(0x6, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000005c0))
rt_tgsigqueueinfo(0x0, 0x0, 0x80000014, 0x0)
ptrace(0x10, 0x0)
ptrace$getsig(0x4209, 0x0, 0x75fffc, 0x0)
getpid()

06:44:02 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1802.636672][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 1802.636711][   T27] audit: type=1800 audit(1580885042.784:3882): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17369 res=0
[ 1802.881505][   T27] audit: type=1800 audit(1580885043.024:3883): pid=19464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17387 res=0
06:44:03 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x8000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:03 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:03 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0xa5)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xb00, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffcfa, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x0, 0xa, r6}]}, 0x28}}, 0x4008054)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x3}, 0x7, 0x5, 0x0, 0x0, "a629f3a11b726811"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}, 0x4e22, 0x7fff, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x3505, 0x3}}, 0xe8)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)

[ 1803.375936][   T27] audit: type=1800 audit(1580885043.524:3884): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17384 res=0
[ 1803.423913][T19477] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1803.445681][   T27] audit: type=1800 audit(1580885043.574:3885): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17387 res=0
[ 1803.495727][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
06:44:03 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1803.680274][   T27] audit: type=1800 audit(1580885043.824:3886): pid=19489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17369 res=0
06:44:03 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1803.746807][T19486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1803.769572][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
06:44:04 executing program 2:
prctl$PR_GET_DUMPABLE(0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8000, 0x7f, 0x40})
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa495}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
finit_module(r2, &(0x7f0000000300)=',[:/trusted\x00', 0x3)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ftruncate(r3, 0x2081ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wlan0&\x00', r3}, 0x10)
mlockall(0x3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'})
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1, 0x1)
clone(0x8008800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f00000017c0), 0x1a0, 0xf0ffff)
ioctl$RTC_UIE_OFF(r5, 0x7004)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00')
pread64(r6, 0x0, 0x0, 0x0)
mq_timedsend(r6, &(0x7f0000000100)="339ce5fd46cab5d185be5e4e240881745da3e7c2b8ffcb5158de6c7a52eaad", 0x1f, 0x28c8, &(0x7f0000000140)={0x0, 0x989680})

06:44:04 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x9a02000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:04 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1804.426527][   T27] audit: type=1800 audit(1580885044.574:3887): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17365 res=0
[ 1804.573345][   T27] audit: type=1800 audit(1580885044.714:3888): pid=19508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17394 res=0
06:44:04 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1804.958135][   T27] audit: type=1800 audit(1580885045.104:3889): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17396 res=0
06:44:05 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x3f00000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:05 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xa00f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:05 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x600}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:05 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1805.622248][   T27] audit: type=1800 audit(1580885045.764:3890): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17367 res=0
[ 1805.738604][   T27] audit: type=1800 audit(1580885045.884:3891): pid=19531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17384 res=0
06:44:06 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:06 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xcf9a020000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:06 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xe302000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:06 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x700}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:07 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x20040005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r7=>0x0})
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e)
bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r3, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

06:44:07 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:07 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1807.303956][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1807.310395][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:44:07 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:07 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x20040005)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r7=>0x0})
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e)
bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r3, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

06:44:07 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xe0ffffffffffffff, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:07 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1807.772419][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 1807.772440][   T27] audit: type=1800 audit(1580885047.914:3898): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16658 res=0
[ 1807.858287][   T27] audit: type=1800 audit(1580885048.004:3899): pid=19586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16737 res=0
06:44:08 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xffffff7f00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1807.970993][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1807.977254][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:44:08 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1808.121762][   T27] audit: type=1800 audit(1580885048.264:3900): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16737 res=0
06:44:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
dup3(r0, r1, 0x0)
ioctl$KVM_GET_CPUID2(r4, 0x4080aebf, &(0x7f0000000300)=ANY=[@ANYBLOB="00000008001f"])
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
dup2(r6, 0xffffffffffffffff)

[ 1808.232151][   T27] audit: type=1800 audit(1580885048.374:3901): pid=19594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16801 res=0
06:44:08 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:08 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:08 executing program 2:
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xfd, 0xea, 0x1, 0x1, 0x0, 0x7, 0x8000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x20, 0x8, 0x6a5b, 0x4, 0xffffffff, 0xfffffff9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x484c0, 0x0)
r2 = socket$inet6(0xa, 0x100000003, 0x3a)
sendto$inet6(r2, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000001c0)={0x4, 0x1, @raw_data=[0x3, 0x7, 0x8, 0x581, 0x7, 0x0, 0x81, 0xc2, 0x81, 0x9, 0x400, 0x40, 0x7, 0x7f, 0x400, 0x7ff]})
socket$packet(0x11, 0x0, 0x300)
socket(0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[ 1808.764560][   T27] audit: type=1800 audit(1580885048.914:3902): pid=19612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16658 res=0
06:44:08 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x11}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1808.872892][   T27] audit: type=1800 audit(1580885048.984:3903): pid=19613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16673 res=0
06:44:09 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xf4ffffff00000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1809.008865][   T27] audit: type=1800 audit(1580885049.154:3904): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16834 res=0
06:44:09 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1809.225771][   T27] audit: type=1800 audit(1580885049.374:3905): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16866 res=0
06:44:09 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x13}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:09 executing program 2:
open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9'])
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x200, 0x80000001, 0x4, 0xcdd})

[ 1809.467835][   T27] audit: type=1800 audit(1580885049.614:3906): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16769 res=0
06:44:09 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
set_thread_area(&(0x7f0000000100)={0x100, 0x81000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x4001, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x450100)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r5, 0x10, 0x1, 0x3, &(0x7f00000002c0)=[0x0], 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000080)={'veth0_to_bond\x00'})

[ 1809.810149][   T27] audit: type=1800 audit(1580885049.954:3907): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16785 res=0
06:44:10 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:10 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffff8000, 0x18}, 0xc)
dup(r2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@initdev}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
dup2(r1, r0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r3, 0x0, 0xedc0)

06:44:10 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:10 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:10 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:10 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xfeffffff00000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:10 executing program 2:
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x1c9c380})
r0 = socket$netlink(0x10, 0x3, 0xe)
writev(r0, &(0x7f0000000040)=[{0x0}], 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80900, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
gettid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000000))
syz_open_procfs(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
write$binfmt_elf64(r3, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x20})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYPTR64], 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x0, 0x9, 0xfffffffffffffffa})
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))
r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r7, 0x0, 0x7fff)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)
close(r1)
close(0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340))

06:44:10 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:11 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfa0}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:11 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:11 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:12 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff00000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:12 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1100}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:12 executing program 2:
getpid()
capget(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
connect$unix(r3, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), 0x8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084)
r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r4, r5, 0x0, 0x102000004)
r7 = socket(0xa, 0x0, 0x8)
syz_open_dev$sndpcmc(0x0, 0x0, 0x20f130a66e677878)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
r8 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100), &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)=0x1)

06:44:12 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x64}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:12 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1812.856822][   T27] kauditd_printk_skb: 10 callbacks suppressed
[ 1812.856839][   T27] audit: type=1800 audit(1580885053.004:3918): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16642 res=0
06:44:13 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:13 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x1, 0xc, 0x4, 0x10000, 0x8236, {0x0, 0x7530}, {0x0, 0x2, 0x20, 0x9, 0x0, 0x3f, "718f60eb"}, 0x91e, 0x4, @offset=0x3ff, 0x101, 0x0, <r2=>r0})
recvmmsg(r2, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x1}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvfrom$x25(r3, &(0x7f0000000480)=""/174, 0xae, 0x20, &(0x7f0000000200)={0x9, @null='               \x00'}, 0x12)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x42000)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0xff, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x80000000, 0x2}, 0x4, 0x0, 0x401, 0x7, 0x4, 0x0, 0xfeff}, 0x0, 0x0, r4, 0x0)
write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x8, 0x2, 0x1}}, 0x14)
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x1, 0x68a5}}}, 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r5, &(0x7f00000017c0), 0x1b4, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

[ 1813.120370][   T27] audit: type=1800 audit(1580885053.264:3919): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16579 res=0
06:44:13 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff01000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1813.306693][   T27] audit: type=1800 audit(1580885053.454:3920): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16660 res=0
06:44:13 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14d}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:13 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1813.765066][   T27] audit: type=1800 audit(1580885053.914:3921): pid=19776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16561 res=0
[ 1813.882812][   T27] audit: type=1800 audit(1580885054.024:3922): pid=19779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16949 res=0
06:44:14 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:14 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x2, 'virt_wifi0\x00', {0x7}, 0x2})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="340100001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000080112000c0001006d6163766c616e00f80002004c0005000a00040000000000000000000a00ebffd11bf5466bca00000a000400ea9c2f85340b000024000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb20000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb000008000100100000000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaa230000080003000300000009bc030002000000640005000a1904000180c200000300000a000400ffffffffffff00000a000400aaaaaaaaaa2400000a000400ff4f0e00000000000000040000000000000000000afd030000000000000000000a0004000180c200000200000a00040010c784011564000008000300000000020a00050004000000000000008cebcfede90c55c31ad137113554103dd0e6e3aef5c1ef84f66a361e3f86ca7a1dd4464468822ffb399f5b35992fce4ba75b5d4549fe212ccbfb1fe64794c22c97601edd8c5be3ac4e10d40001b58b222c3b29b009bc07e0a5b899b4d8a02e4cacb38e82c976fb92f6934ba62de4ab266be7a8aacd9fe1cb8a55e4645005d16a4eab6cf578ca8879b71ccac6766e4b4e0d58dd22a49d9492daf93eab6586dded12b188d31f89c15054f7c532e20f90412d1d9446a593efb12e65ae2b01f9a74299c31e0fb5993300000000f6603b389e34f193cc94f61527418a02a89935ff0dec3ad48e2628d0d27ca32c719cb9c6b93177246e46e94a0d4e230e3de615035665b2feb8add3cf3bce0ed5853a8b21e8541b046d5ecaebf4832f0b3977906e71"], 0x134}}, 0x10)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x9, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

06:44:14 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x29a}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1814.176079][   T27] audit: type=1800 audit(1580885054.324:3923): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16562 res=0
[ 1814.263009][T19792] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[ 1814.297027][   T27] audit: type=1800 audit(1580885054.444:3924): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0
[ 1814.312986][T19792] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'.
06:44:14 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r1 = semget$private(0x0, 0x1, 0x90)
r2 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000540)={0x3})
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x4)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000000))
ftruncate(r3, 0x1000000)
sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="819baadd94a968628b004798626e04af47000000", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000640)={r6, @in={{0x2, 0x0, @dev}}, 0x80, 0x8001}, &(0x7f0000000280)=0x90)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={r6, 0x3f, 0x1, [0x5]}, &(0x7f0000000640)=0xa)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r6, 0x8001}, 0x8)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10)
semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000140)=""/227)
r7 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000540)={0x3})
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x4)
ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000000))
ftruncate(r8, 0x1000000)
sendfile(r7, r8, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r9 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
r10 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="819baadd94a968628b004798726e04af47000000", @ANYRES32=<r11=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000640)={r11, @in={{0x2, 0x0, @dev}}, 0x80, 0x8001}, &(0x7f0000000280)=0x90)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={r11, 0x3f, 0x1, [0x5]}, &(0x7f0000000640)=0xa)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r11, 0x8001}, 0x8)
r12 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00')
r13 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="819baadd94a968628b004798726e04af47000000", @ANYRES32=<r14=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000640)={r14, @in={{0x2, 0x0, @dev}}, 0x80, 0x8001}, &(0x7f0000000280)=0x90)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000002c0)={r12, 0x5, 0xcbf1, r2})
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x60)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
r15 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x20c0)
getsockopt$X25_QBITINCL(r15, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

06:44:14 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff0f000000000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:14 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:14 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1814.836211][T19822] IPVS: ftp: loaded support on port[0] = 21
[ 1814.849683][   T27] audit: type=1800 audit(1580885054.994:3925): pid=19821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16610 res=0
06:44:15 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2e4}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1814.949160][   T27] audit: type=1800 audit(1580885055.024:3926): pid=19823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16996 res=0
06:44:15 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x157c}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:15 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1815.132200][   T27] audit: type=1800 audit(1580885055.274:3927): pid=19832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16523 res=0
[ 1815.273479][T29589] tipc: TX() has been purged, node left!
06:44:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r3, 0x4, 0x6dd45b3e1950b569)
openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0)
lstat(0x0, &(0x7f0000000580))
mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', 0x0, 0x0, 0x8048, 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@remote={[], 0x2}, 0xb})
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/28)
ftruncate(r2, 0x8200)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

06:44:15 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:15 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1f40}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:16 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffff7f00000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:16 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:16 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000140)=0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)

[ 1816.479739][T19883] bridge1: the hash_elasticity option has been deprecated and is always 16
06:44:16 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:16 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:16 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x2, 0x27a, 0x0, 0x9, 0x0, 0x10, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c)
readv(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
getpid()
socket$kcm(0x11, 0xa, 0x300)
lseek(0xffffffffffffffff, 0x0, 0x3)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00'})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140))

06:44:17 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:17 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mknod(&(0x7f0000000000)='./bus\x00', 0xffe, 0x0)
clone(0x21000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x800001000000100, 0x1000)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
execve(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)

06:44:17 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:17 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x600}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:17 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
sync_file_range(r0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000280))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x3}], {}, [{}, {}]}, 0x3c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x0})

06:44:17 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffffff00000000, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:17 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101, <r1=>0x0, 0x0, 0x6})
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)={0x6, r1})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @dev}, 0x2}}, 0x2e)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x3800)
sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x3f000000, 0x0}}], 0x40000fb, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, r4, 0x8)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000180))
syz_init_net_socket$x25(0x9, 0x5, 0x0)

06:44:17 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x401f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1817.924765][   T27] kauditd_printk_skb: 11 callbacks suppressed
[ 1817.924865][   T27] audit: type=1800 audit(1580885058.074:3939): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17249 res=0
[ 1818.078916][T19925] overlayfs: filesystem on './file0' not supported as upperdir
06:44:18 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:18 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x700}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:18 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4d01}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1818.375586][   T27] audit: type=1800 audit(1580885058.524:3940): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17057 res=0
06:44:18 executing program 2:
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x100)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x1, @null, @rose={'rose', 0x0}, 0x1d6, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
syz_open_dev$evdev(0x0, 0x0, 0x0)
getegid()
close(0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = socket(0x2000000000000010, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b3bcbb3f4264f71f587a30e0101b99e064c1989e2ab1f7b2784751d41b492813001be9b7fcc666728f8b0bca5bbee45f3e9d58cd550e4137804df4c63051777f24cfcf4e3f6a99b05a55b32708e8e56a9da2dd8d4f094b56266afe5f57930c3f2f57e7e3a1d1190f4500b75b3d7f4e0a689384ec5a6e80abcc05815b", @ANYRES16=r5, @ANYBLOB="030a000000000000000008000000"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff801}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x98, r5, 0x104, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x98}}, 0x4000400c)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r6, 0x4, 0x42800)
bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x6, @dev={[], 0x22}}, 0x10)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

[ 1818.503996][   T27] audit: type=1800 audit(1580885058.554:3941): pid=20045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16891 res=0
[ 1818.653780][   T27] audit: type=1800 audit(1580885058.764:3942): pid=20050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16487 res=0
06:44:18 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffe0, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:19 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffff53a7)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0xfd0e7000)

06:44:19 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x900}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fchdir(r0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x200100)
fcntl$setstatus(r5, 0x4, 0x6900)
r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$EXT4_IOC_MIGRATE(r7, 0x6609)
fcntl$setstatus(r7, 0x4, 0x6100)
ftruncate(r7, 0x8200)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400)
ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000040)=0x9)

06:44:19 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x11}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1819.242522][   T27] audit: type=1800 audit(1580885059.384:3943): pid=20167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16546 res=0
06:44:19 executing program 2:
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x11\x00'}})
keyctl$invalidate(0x15, r0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6095feb4c6236666)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x10001}}, 0x1000, 0x6, 0x10001, 0x3f, 0x0, 0x0, 0xa9}, &(0x7f0000000000)=0x9c)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x7f, @remote, 0x2}, 0x1c)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000580)={r3, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r6, &(0x7f0000001400)="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", 0x600)
ioctl$KVM_NMI(r4, 0xae9a)
sendfile(r6, r7, 0x0, 0x10000)

[ 1819.408318][   T27] audit: type=1800 audit(1580885059.554:3944): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16770 res=0
06:44:19 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1819.593247][   T27] audit: type=1804 audit(1580885059.734:3945): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir069128260/syzkaller.789Xio/57/file0/file0" dev="sda1" ino=16561 res=1
06:44:19 executing program 4:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0xc0045103, &(0x7f0000000100))

06:44:20 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r3 = socket$inet(0x2, 0x3, 0x29)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42000)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_batadv\x00', {0x3}})
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

[ 1819.800792][   T27] audit: type=1800 audit(1580885059.774:3946): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16561 res=0
06:44:20 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1819.899064][   T27] audit: type=1800 audit(1580885059.844:3947): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16561 res=0
06:44:20 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7c15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1820.027635][   T27] audit: type=1800 audit(1580885059.994:3948): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16721 res=0
06:44:20 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x13}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:20 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:20 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @remote, 0x2}, 0x80)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYPTR, @ANYRES32=r2, @ANYRES32=r4], 0x3}}, 0xc0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000140)={0x8, 0x0, 0x1})
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r11=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000100)={r11}, 0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000080)={r11, 0x25, "ccf921663c2d873daf610189015c18d21c7c8770454f223d3f58bae16e11fd2532da57fa54"}, &(0x7f00000000c0)=0x2d)

06:44:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2941, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r2, 0x56aa852b00f893ff, 0x3, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c6cab908b5dad02000000000000002b7069646d6120000000"], 0x19)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

06:44:21 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9a02}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x6, 0x8000031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xc8)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/4098, &(0x7f0000000000)=0x1002)

06:44:21 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:22 executing program 4:
get_thread_area(&(0x7f00000000c0)={0x3f, 0x20000000, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000b00)=""/74, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302})

06:44:22 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r5 = open(0x0, 0x40c5, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000040)={0x121, 0xa, &(0x7f0000000800)})
ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/vboxnet1&selinux\xb7wlan1vmnet0\x95\x00')
clock_gettime(0x0, &(0x7f0000000300)={<r8=>0x0, <r9=>0x0})
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)={0x40, 0x5, 0x4, 0x0, 0x7, {r8, r9/1000+30000}, {0xf3cc77be62e2e21a, 0x2, 0x4, 0x7f, 0x0, 0x7, "d3b538eb"}, 0x7fff, 0x1, @offset, 0x3f, 0x0, <r10=>0xffffffffffffffff})
accept$alg(r10, 0x0, 0x0)
r11 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(0xffffffffffffffff, r11, 0x0, 0x7fffffa7)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x438000, 0x0)
write$9p(r12, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
r13 = dup3(r2, r3, 0x0)
dup2(r13, r4)
r14 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
write$9p(r14, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r14, 0x41007701, &(0x7f0000000000)='/vboxnet1&selinux\xb7wlan1vmnet0\x95\x00')
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r14, 0x2)

06:44:22 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:22 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:22 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:22 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:23 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x64}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:23 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000009f40bc175a12cc034c3cf9a75df554263f8274818f79d325c9bcbad224142742438ca91f7678226619b25a4fa3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000380)=""/223)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002e0, 0x69, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

[ 1823.147481][   T27] kauditd_printk_skb: 9 callbacks suppressed
[ 1823.147505][   T27] audit: type=1804 audit(1580885063.294:3958): pid=20323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir069128260/syzkaller.789Xio/62/file0" dev="sda1" ino=16518 res=1
[ 1823.192823][   T27] audit: type=1800 audit(1580885063.294:3959): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17297 res=0
06:44:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x400}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x400, 0x0)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0))
socket$inet6_sctp(0xa, 0x1, 0x84)

[ 1823.495629][T20444] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
06:44:23 executing program 2:
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={<r1=>0x0, 0xb9, "5092d506608da0823880cfa8b533cd5137f06f84132ae0778604b38245e7c332db3f25a07b1301fd75267d70a30ea9c28be677160d235a8760f820194e9be271f75d92d26b871ff2b597e3d78b97e2e1031a54ce008c8ad14f951d91ae0ad6ca0680cf53b3715516a41a0ed48450250297a32f237b1efc83c5c7afff03907fe85db0f22e2dacfb17863f25300a5b2a9c4789b26c92d7a62a33e6d39d681dd69ad3a347cf5ba2b61eab8078bc65b310bedafe31532f09bb79c6"}, &(0x7f00000001c0)=0xc1)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x25ef, 0xf30, 0x800a, 0x2, 0x9b, 0x1, 0xe32, 0x9, <r2=>r1}, &(0x7f0000000240)=0x20)
r3 = syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0x80000001, 0x2001)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={r2, 0x9, 0x4, [0x178f, 0x2b9c, 0x0, 0x4]}, &(0x7f00000003c0)=0x10)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff56c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1248}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4884}, 0x800)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100000000)
rt_sigsuspend(&(0x7f0000000640)={[0xd29]}, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ubi_ctrl\x00', 0x80, 0x0)
ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000700)={0x7, 0x0, 0x401, 0x4800, r7})
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x5c}}, 0x44005)
r8 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x800)
sendfile(0xffffffffffffffff, r8, &(0x7f00000008c0)=0x3, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000940)={0x1, &(0x7f0000000900)=[{0x0, 0x1, 0x8, 0x1}]}, 0x10)
r9 = open(&(0x7f0000000980)='./file0\x00', 0x4000, 0xb7)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x9c, r10, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x10}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x319831291c289f15}, 0x4000050)
ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000b80)={0x9, @pix_mp={0x9, 0x0, 0x20363159, 0x8, 0x4, [{0xb1c6, 0xffff6556}, {0x1, 0x20}, {0xf20, 0x8}, {0x7, 0x6}, {0x3, 0x401}, {0x80000001, 0x10001}, {0x1ff, 0x40}, {0x7, 0xc12}], 0xb5, 0x66, 0x7, 0x2, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000c80)={'team0\x00'})
fremovexattr(r4, &(0x7f0000000cc0)=@known='trusted.overlay.nlink\x00')
r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/qat_adf_ctl\x00', 0x8103, 0x0)
connect$nfc_raw(r11, &(0x7f0000000d40)={0x27, 0x1, 0x2, 0x5}, 0x10)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setstatus(r12, 0x4, 0x0)
r13 = creat(&(0x7f0000000d80)='./file0\x00', 0x118)
setsockopt$inet6_dccp_buf(r13, 0x21, 0xc, &(0x7f0000000dc0)="125e2330626204c0ae7aeabcaa7d6ec1f2afacb94c956125409879eb2817ac7fdda9b4352e316f8be56f4bfae018d8cd806527e87177957b44dca8cc6c16e2f0dfac2d41955e02237554a1d67d5c58257b941f9a30a09d0126b30c901d100f9f706f7faed187207c8821eb48841048fb65abebdb6e32e46763a5206a0e41b773af121d468d409ae822d0a5c1fa1c9cf0c487ecb6b0586eb89934ff22c2924f3d71c643a0c4ff9b022eed1864316c752ffabd54dd9dc58d2130", 0xb9)

[ 1823.548296][T20444] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[ 1823.589686][T20444] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
06:44:23 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14d}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:23 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:23 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd102}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:24 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x7, 0x8}, &(0x7f0000000040)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={<r5=>0x0, 0x1}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={r5, 0x0, 0x32}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

[ 1823.838303][   T27] audit: type=1800 audit(1580885063.984:3960): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16581 res=0
[ 1823.971076][   T27] audit: type=1800 audit(1580885064.114:3961): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17345 res=0
06:44:24 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfa0}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1824.013520][   T27] audit: type=1800 audit(1580885064.144:3962): pid=20567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17330 res=0
06:44:24 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1824.155280][   T27] audit: type=1800 audit(1580885064.304:3963): pid=20634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16581 res=0
06:44:24 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x29a}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:24 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000b}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1824.490988][   T27] audit: type=1800 audit(1580885064.634:3964): pid=20688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17330 res=0
[ 1824.534167][   T27] audit: type=1800 audit(1580885064.674:3965): pid=20684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17345 res=0
06:44:24 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x0, 0x3f, 0x1f, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x4f78b3bf39b888aa, 0x0, 0x5, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x1ff)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000340), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0x1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000500ac14142603000e1208001e000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000500ac14142603000e1208001e000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x24004810)
write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYBLOB="c820ff0000000000000000c8d756e6c3b5993f078d5f7a43f6f48110cff38fd50e8dc66f424134b7ffa210b9d47bad0c0dfd2502496ee282b4a692388b5f13bc2e349bb0700c1c262703d30dac075496a580f7ef969c0300ad0339aaa78573e94a0d5936193e807bc91ca87801506a885f03ae16f5954cd2e00a7f679b1a5813000000000000000000080000"], @ANYPTR, @ANYRESDEC, @ANYPTR=&(0x7f0000001b80)=ANY=[]], 0x34)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008104e00f80ecdb4cb902020000040e000000810040fb12000100040fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0xff3e)
r7 = gettid()
perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0xe2, 0x81, 0x2, 0x0, 0x0, 0x7, 0xe620, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x66c9cd73, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11000, 0xd6d4, 0x3, 0x0, 0x1, 0x73a, 0xc4}, r7, 0x8, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x163040, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(r9, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x4739c0, 0x0)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f00000001c0))
r12 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r13 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r13, 0x8983, &(0x7f0000000380)={0x1, 'bond0\x00'})

[ 1824.573803][   T27] audit: type=1800 audit(1580885064.684:3966): pid=20690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16522 res=0
06:44:24 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1100}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1824.649417][   T27] audit: type=1804 audit(1580885064.684:3967): pid=20690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir069128260/syzkaller.789Xio/63/file0" dev="sda1" ino=16522 res=1
06:44:24 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x220c, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7a07d86548073f7d)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x110)
fallocate(r1, 0x0, 0x0, 0x4)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r6=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={<r7=>r6, 0x6, 0x200}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x2}, 0x8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r9 = dup(r8)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$netrom(r9, &(0x7f0000000000), 0x0, 0x4084, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000240)={0xc2, 0x7})
r10 = creat(0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r10, 0x800442d4, &(0x7f00000000c0))
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0)

06:44:25 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1824.934358][T20801] mkiss: ax0: crc mode is auto.
[ 1825.031373][T20801] mkiss: ax0: crc mode is auto.
06:44:25 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x38, [], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/56}, &(0x7f00000000c0)=0x78)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100))

06:44:25 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2e3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:25 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000001c0)=0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003200190100000000000000000200000004000000180001001400100010000b000500000000000000000000a786ef00"], 0x30}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000100c050b66f000008410000004c001800000000657468"], 0x3}}, 0x0)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[ 1825.589718][T20835] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0
06:44:25 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1825.677058][T20841] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0
06:44:25 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:26 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r1=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0xb00}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x1000)
r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0x40d09)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
eventfd2(0x0, 0x0)

06:44:26 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0xf27, 0x6, 0x200, 0x7}, 0x14)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x8, 0x0, 0x0, 0xe, 0x3}]}}, &(0x7f0000000280)=""/222, 0x2a, 0xde, 0x8}, 0x20)
dup(r3)

06:44:26 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1826.168043][T20857] BPF:[1] Invalid name_offset:8
[ 1826.202878][T20857] BPF:[1] Invalid name_offset:8
06:44:26 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:26 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@dccp={{0xa, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @remote}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ff7f07", 0x0, "1000"}}}}}, 0x2e)
accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6, &(0x7f0000000100)=0x80)

06:44:26 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=""/194, 0xc2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000706030000b18f34881997bae642d6000000000000000a0000070900020073797a320000000005000100070000000500a71222f02a924f1c1704f024620931601b645068704706aa526ef41779f2f478340ad15309f0b877cd2ab5e8dab2142e55b9"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

06:44:26 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:26 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:27 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:27 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x157c}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:27 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:27 executing program 4:
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000400)={0x2, 0x4, 0x4, 0x1, 0x0, {r2, r3/1000+30000}, {0x2, 0x1, 0x27, 0x0, 0xfa, 0x7f, "73bd2eb1"}, 0x9e, 0x3, @planes=&(0x7f0000000100)={0x1000000, 0x0, @fd, 0x8}, 0x800, 0x0, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4081, 0x8101, 0x80, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x0)
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x1c9c380})
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000040)=[{0x0}], 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80900, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
gettid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000000))
syz_open_procfs(0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c)
write$binfmt_elf64(r8, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000000c0)={0x20})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r11, 0x660c)
write$binfmt_elf64(r10, &(0x7f0000000140)=ANY=[@ANYPTR64], 0x8)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r11, 0x0, 0x9, 0xfffffffffffffffa})
ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0))
r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r12, 0x0, 0x7fff)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)
close(r6)
close(0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340))

06:44:27 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="368c3744a62fb875dfdc36c1e616ac742bbce3041ed13570b2a49bfa090f9adfbf1dc008b6b7a613b46f262b27a84a167e0618e558fd85a31f3f32e66b3f0c971623440fce36c3a609f4fbfe72d2b72639d784464582b350de3d0333887125dfa1ca26c48ac5f352cdc08f8ceae4296e814d55c53de81085b5f5157826addf8ce543ba05feb107bc64feaa91cb8bf5abbe2af1fb00583e6315020c35a0798ec1ac84d14fcea96d311ca422f5002109a1361f38c9bcbc5ad7c27eca7ec64c1d8ac5ba32fd83356ab5ac3eda4178d4bdedd0920a5a29ffb1754c49134c3543fd8d629a8c31151287af8065b3afde4b63b54d53bc", 0xf3}], 0x1}}, {{&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="c8266bb4e611f53f525e5dd627f18aa2533eca348f83b4cff7a5c7cef09d15707a9a1dd9de6341191454895dfdde98e049d1676585c343c873f391208fa55e89f0d0e693f56fa7f6e362a575b4dbffcd1b54f6cfedf7f266fc02476761028f34f2f30c836a6cb067b53a1199d40d3d5e9a04876cbc053afbed19d72f1916d8437371d67a9e730db76002ea6ad59386077d0b6eb322f805d488a31956a01bd460f472a387", 0xa4}, {&(0x7f00000003c0)="2a4adf99aa3d6904720f6e5f89eb231fcef9adb15b5a087244f3498c56e9af849e6005e7d9e83aae396502de56207aebcc615da88e75b7eac3130dacb50241552d407c060ff19be4a1f9dfb7a7755053e8e4bcd2002137f637799eeed4a7a8ca9814bacdd0f33bc577800c3bcc1aeb34f4db38351242e25ed4e4ea72f66be8a42213a262feb26a2a014f6c619477d54b2ae78112e825e8a94e3223381a5b5f6c3404ecd8f939d79ae6a3b802a7a63bc7c66118a253b26a56df860e8a8306329e221f72e2229e22e9a6e1671fc9666e8b819d26edb534ce164df97ac3a42cc4bbf2a201ce4656443e808e8aefdd", 0xed}], 0x2, &(0x7f0000000340)}}], 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x800, 0x1c)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x5, 0x4)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000005c0)={0x980000, 0x100, 0xaa16, <r5=>r3, 0x0, &(0x7f0000000580)={0x9a0915, 0x3f, [], @p_u8=&(0x7f0000000540)=0x1}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r8=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r8}, 0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000600)={r8, @in6={{0xa, 0x4e23, 0xffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x100}}}, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f0000000380)=0xed1e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r10 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r10, 0x200004)
sendfile(r1, r10, 0x0, 0x80001d00c0d0)

06:44:28 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:28 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x4, 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
dup(r1)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0)

06:44:28 executing program 4:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffffffffffff46}], 0x23a, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00')
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)

06:44:28 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x600}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:28 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1f40}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:28 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1828.658082][   T27] kauditd_printk_skb: 11 callbacks suppressed
[ 1828.658100][   T27] audit: type=1800 audit(1580885068.804:3979): pid=21234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16658 res=0
06:44:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in, 0x0, 0x4, 0x0, 0xff}}, 0xe8)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x23, 0x6, 0x4, 0x416c2040, 0x7, {0x77359400}, {0x1, 0x1, 0x4, 0x8, 0xf, 0x9, "5cc98900"}, 0x10001, 0x2, @planes=&(0x7f0000000000)={0x2, 0x0, @fd, 0x3ff}, 0x101, 0x0, r2})
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)

06:44:29 executing program 4:
syz_open_dev$audion(0x0, 0x0, 0x20800)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000002c0))
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x400020000000010, 0x2, 0x0)
dup2(r1, r2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001300)='TIPCv2\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc8, &(0x7f0000001340)="c6672f73fa39795d3fc438bac7319bcf492bb0233afad41c31fb9eea319f00aff4e3fc9e67b986ea65f2ca16568016aff47cdcdc077121e945d3899620008f7f4f636290032895c17f9e4a4ac361c41d406d9693ecb598e8657ac43b40f190fda4b210b3db916823879573ad5d26b6c600a77feb66d480bab03cd56c68d4e30c9dde853802035956079fcff6eb928dce150da815979266478dc2047383e0af2ec7e26565ceb9c369d2f29578e827f49440d558ba07892a915b7a6e30c78cb27ab4a7296e4136ef37"}}], 0x1c)

[ 1828.880169][   T27] audit: type=1800 audit(1580885068.824:3980): pid=21317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16673 res=0
[ 1829.029800][   T27] audit: type=1800 audit(1580885069.084:3981): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1118 res=0
06:44:29 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x5000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:29 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1829.431133][   T27] audit: type=1800 audit(1580885069.574:3982): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16850 res=0
06:44:29 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x700}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:29 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1829.781564][   T27] audit: type=1800 audit(1580885069.924:3983): pid=21466 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16658 res=0
06:44:30 executing program 2:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000001c0)=""/24)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x4010006, 0x20000000209, 0x0, <r4=>0xffffffffffffffff})
r5 = dup2(r3, r4)
ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0xa00000, 0x20000000209, 0x0, <r6=>0xffffffffffffffff})
r7 = dup2(r2, r6)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000000)={0x9, 0xd, 0x1, 0xffffffffffffffff, 0x8})
ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000040)={0x5, <r8=>0x0, 0x1, 0xfffffffffffffff7})
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1800}, 0x40)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={r8})

[ 1829.899390][   T27] audit: type=1800 audit(1580885070.004:3984): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16834 res=0
06:44:30 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:30 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1830.394255][   T27] audit: type=1800 audit(1580885070.544:3985): pid=21479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16487 res=0
[ 1830.546030][   T27] audit: type=1800 audit(1580885070.694:3986): pid=21487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16914 res=0
06:44:30 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b9010400000f3266b898e0e1660f23d80f21f86635c00000d00f23f80f01c5f40f01d10f01d1b800008ec066b90000000066b8d600000066ba000000000f30dd43332e650f009c0000", 0x4a}], 0x1, 0x0, &(0x7f00000001c0)=[@efer], 0x1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r5, r6, r8, r11, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)
syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="67727071756f74613d003e97b9b2b4caf1f00ea0d54f05df82ace2b1f609b49fd1fe6ce61b2a81b2d9b06befb5ede3630e6a4e742b6b2537f0af56d60d1bb7c1abc24f3ae00f0c8b1f4619456509a98ff5a76e1c161c5714d3a88d9ac8da157a9e322e920e5fed8a3fa188ec4707509aca482d4495a9f9dfa5ed0f4381545244a7f26a273849da73a84917c3da5fc4deb70438fc1978a9c834ba37177841cd7e92cbc16c2cd0b4a4f6b8e3837ed965b922c77c3bd97183311730ec8ab36f52b4e10b17cac62c5d972f0672c6ff33cfd186bb13812ba29f9d85e6678972be80bf6f4ab24cdf47e3d3a018e286a9c938e3db66169c3d6e97c73f3eab19236529e0d6c7da47e7bb40cab8389fc85141f6d42f872343508f3a06fcdd1d46e41e7d53387185277f93352bab53fe7a9acf7d9520687449b70e540e2f758bf745a52cc9d51962262a98de706df4835c380256018113e83d8350b79529adb75a9831a8a7a74fe2f4a1998277ce4d6a0bca7bd031ac1e221d1d536c06a3deab"])

06:44:30 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x900}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:31 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1831.042037][   T27] audit: type=1800 audit(1580885071.184:3987): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16658 res=0
06:44:31 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r0 = syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000004c0)={0x10, 0x40, 0x2})
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00')
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x6})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x4e20, @remote}})
clock_gettime(0x4, &(0x7f00000003c0))
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000340))
lseek(r1, 0x1f, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f00000001c0))
r4 = syz_open_procfs(r3, &(0x7f0000000240)='io\x00')
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xa}, 0x8040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4)
getgroups(0x4, &(0x7f0000000580)=[0xee00, 0xee01, 0xee00, 0x0])
r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="2e82c102809e3a9f7b1daf9a2d69c0309f85734c868e38174b81c76cde52c65648681c04677f1e857726ae881e7c19ef7559c133774a4f5e0fbf91b4d03ca219dca32a8fd405bd0fa8ccf17998c80e7a9bf185bda3c8a8ffff37361a4bf5ea9d5e8606c64f", @ANYRES32=<r7=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={r7, 0x1c2}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0xfffffe01}, 0x8)
write$binfmt_script(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2302"], 0x2)
close(r6)
setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000040)=0x20, 0x4)

06:44:31 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xd5, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', 0x0, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x0, 0xffff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x3f, 0x9, "778cc818"}, 0x1, 0x4, @planes=&(0x7f00000000c0)={0xfffffffe, 0x1, @userptr=0x10000, 0x401}, 0x6353})
r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x1c83, 0x400000)
mq_timedsend(r5, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0))
r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKPG(r6, 0x1269, &(0x7f00000002c0)={0x6, 0x0, 0x74, &(0x7f0000000640)="ea5f5b4d3ef92b2f3b6f73d2c202820002e49ea111ad6bfd54366662172de500f34f2ecaabce289633190f2ec2e52d989d54898b24eaa42b7b8fc9111e7d929e8e06ddce54d3af30f48c03b871cf8b3d2ca83607366dad5ecdf2500a5452e5ddf8ca43e27c12215dade2e184625db8a7b1fc16fe"})
fcntl$getown(r6, 0x9)
ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000140)={0x7ff, "ee9999d5a2ecb2bad44a7852d4117b95f9493c8103d4186df94515a2d81e9785", 0x0, 0x6, 0x3, 0x45a6960f0f68f6f3, 0x4000812, 0x4})

06:44:31 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x401f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:31 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:31 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1831.447956][   T27] audit: type=1800 audit(1580885071.594:3988): pid=21619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16866 res=0
06:44:32 executing program 4:
r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1f, 0x40000)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={<r1=>0x0, 0x9fbe}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={<r2=>r1, 0x8, 0x10}, &(0x7f0000000100)=0xc)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xf281, 0x800b, 0x7, 0x9, <r4=>r2}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r4, 0x4}, 0x8)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={<r6=>0x0, 0xfc00}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={r6, 0x7ff}, 0x8)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x1c9084, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r8, 0x320, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x729}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48031}, 0x4000081)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000480)={<r9=>0x0, 0x7}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e22, 0x9, @local, 0x800}}, 0x9, 0x7}, 0x90)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cachefiles\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000600), 0xfffffffffffffffe)
clock_gettime(0x0, &(0x7f0000000640)={<r11=>0x0, <r12=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000680)={0x7463, 0x1, 0x4, 0x100000, 0xdb2, {r11, r12/1000+10000}, {0x2, 0x1, 0x8, 0xd2, 0x9, 0x9, "7bee62e8"}, 0x80000001, 0x3, @fd=r5, 0x2, 0x0, <r13=>0xffffffffffffffff})
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r13, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r14, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
syz_open_dev$amidi(&(0x7f0000000840)='/dev/amidi#\x00', 0x5, 0xa000)
r15 = syz_open_dev$audion(&(0x7f0000000880)='/dev/audio#\x00', 0x7, 0x800)
ioctl$SNDCTL_DSP_POST(r15, 0x5008, 0x0)
r16 = syz_open_dev$vcsn(&(0x7f00000008c0)='/dev/vcs#\x00', 0x9, 0x200040)
recvfrom$rose(r16, &(0x7f0000000900)=""/140, 0x8c, 0x2, &(0x7f00000009c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @null}, 0x1c)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000a00)={0x0, 0x4, 0x4, 0x10000, 0x6, {0x0, 0x7530}, {0x1, 0x8, 0x3f, 0x4, 0x1, 0x42, "4f3bfbf8"}, 0x20, 0x2, @offset=0x1, 0x6, 0x0, <r17=>0xffffffffffffffff})
open_by_handle_at(r17, &(0x7f0000000a80)={0x58, 0x400, "d5afa59dfdca1116262ccdac8d54b9ae05c07e8508fea8aa036b1c21dbb84efbf443315b46524dcca14577edebd5ae5570da93982878dfb68c1e6b6854cc31c45c64e781bbbcc890eac2c9eda2b92008"}, 0x0)
lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
mount$bpf(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='bpf\x00', 0x10, &(0x7f0000000c40)={[{@mode={'mode', 0x3d, 0x278fb5b6}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x2}}], [{@euid_gt={'euid>', r18}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':vmnet0!&self-vboxnet0[,'}}, {@dont_measure='dont_measure'}, {@pcr={'pcr', 0x3d, 0x1c}}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]})
ioctl$TCGETX(r5, 0x5432, &(0x7f0000000dc0))

06:44:32 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r0 = syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000004c0)={0x10, 0x40, 0x2})
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00')
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x6})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x4e20, @remote}})
clock_gettime(0x4, &(0x7f00000003c0))
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000340))
lseek(r1, 0x1f, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f00000001c0))
r4 = syz_open_procfs(r3, &(0x7f0000000240)='io\x00')
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xa}, 0x8040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4)
getgroups(0x4, &(0x7f0000000580)=[0xee00, 0xee01, 0xee00, 0x0])
r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="2e82c102809e3a9f7b1daf9a2d69c0309f85734c868e38174b81c76cde52c65648681c04677f1e857726ae881e7c19ef7559c133774a4f5e0fbf91b4d03ca219dca32a8fd405bd0fa8ccf17998c80e7a9bf185bda3c8a8ffff37361a4bf5ea9d5e8606c64f", @ANYRES32=<r7=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={r7, 0x1c2}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0xfffffe01}, 0x8)
write$binfmt_script(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2302"], 0x2)
close(r6)
setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000040)=0x20, 0x4)

06:44:32 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:32 executing program 4:
r0 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r1)
chown(&(0x7f0000000180)='./file1\x00', r0, r1)
r2 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r3)
chown(&(0x7f0000000180)='./file1\x00', r2, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
recvmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f00000001c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/211, 0xd3}], 0x1}, 0x60)
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000010800, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17, 0x3}], 0x220009, &(0x7f0000000280)={[{@fat=@quiet='quiet'}, {@nodots='nodots'}, {@fat=@errors_continue='errors=continue'}, {@fat=@check_normal='check=normal'}, {@fat=@flush='flush'}], [{@obj_type={'obj_type', 0x3d, '\x89\xa6\xf5\xfc\x04}<Ol\xb3\xfa'}}, {@smackfshat={'smackfshat', 0x3d, 'showexec'}}, {@fowner_gt={'fowner>', r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'showexec'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r2}}]})

06:44:32 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4d01}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:32 executing program 4:
inotify_init()
syz_open_dev$vcsu(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_read_part_table(0x8000, 0x5, &(0x7f0000000640)=[{&(0x7f0000000240)="00fc48f5140b95151943044f3480b83548f5605d746ce22524673d47182088f20751aa11733fe06890259e34492324ab4b80f7098d5b171caa36564e904b8de9ff28fb3c16ffc71d5647cb28f46ace2a1080b9a57e059f97aa125239c080d984d794046a5339a131cb3560d512c712e6f88a30bf542af3446994d1270f91b12fb892a0b522070fe7e8b58e3d57c0972781af86f1113ed2a6be75707886123df3439d65b00536e376378ea3cb153077ef4cb0f9886bf8", 0xb6, 0x4}, {&(0x7f0000000300)="f8c3808fc0f369c7b1faf2591b824254fdf838119f0a7d4d919e3004a38a58a1c6199a9fa9c03c2577a47fe02f161e082ee040fb0db38757548a5ed887c195c23e90", 0x42, 0x3}, {&(0x7f0000000380)="3a213b020599f6ae5320211f8083368424ad6b851b465ce89c187b27fd6c30efea7a1dc836a7015d283ea2d3e6ae0bdc66dd0aea63a7aeacff0f11e2b79b137d9f6ebaa3657c7d4a3da991744d887ac40cdc837ebf5b1f85485497fab230f04c48cc8044266be99b6a4798bb00c1c3f9229b4473c81519e0fdaf61b2b638f3f721f5c347e1ab090a0d3277", 0x8b, 0x7fffffff}, {&(0x7f0000000440)="415a0b5560f230fb52c1df0f784efbab7ab2219bf3969d9639b6065326e21f0885368837e5dd8e4b39e26405a0fb253b4c111c4a69b013e4c9db7b2a71d7e6409b10c7e467df89465f423f507514eea0cfce74b03e0e03c821e5b07302145fee413ec62fa184fc36e851a78c2c0a5cb2e5a477bf73aed31b346fe721b386ff430e7dfa3dd35f7f609f5449887884272a8aaec576a25941cbdf5a2e96da7727a7891ca347711fbba95bbed7123b3ceca193bcea6e6460b5246eb50d4791041c9435b797", 0xc3, 0x8000}, {&(0x7f0000000040)="d9262088cef4dcd8ba904af858279cd2", 0x10, 0x12e206e2}])
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x283f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

06:44:32 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:32 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(r0, &(0x7f0000000540), 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x8100)
syz_open_dev$media(0x0, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

06:44:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x200, 0x0, 0x4, 0x44e021, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x81, 0x6, "013f9ae4"}, 0x0, 0x0, @fd, 0x0, 0x0, <r1=>0xffffffffffffffff})
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x20000000)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

[ 1833.158590][T22076] vivid-009: disconnect
06:44:33 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:33 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:33 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x38})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:33 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1833.776152][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 1833.776240][   T27] audit: type=1800 audit(1580885073.924:3995): pid=22195 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16850 res=0
[ 1833.853010][T22073] vivid-009: reconnect
06:44:34 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6", 0x92, 0x9}], 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = socket(0x2000000000000010, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b3bcbb3f4264f71f587a30e0101b99e064c1989e2ab1f7b2784751d41b492813001be9b7fcc666728f8b0bca5bbee45f3e9d58cd550e4137804df4c63051777f24cfcf4e3f6a99b05a55b32708e8e56a9da2dd8d4f094b56266afe5f57930c3f2f57e7e3a1d1190f4500b75b3d7f4e0a689384ec5a6e80abcc05815b", @ANYRES16=r3, @ANYBLOB="030a000000000000000008000000"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff801}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0xe4, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x148}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x11b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff60a}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000810}, 0x24004801)

[ 1833.879715][   T27] audit: type=1800 audit(1580885073.994:3996): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16977 res=0
06:44:34 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1834.085304][   T27] audit: type=1800 audit(1580885074.234:3997): pid=22209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16948 res=0
06:44:34 executing program 4:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyprintk\x00', 0x208400, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000100)={0x2d5, 0xba8, 0x0, 0x3, 0x3, [0x1f, 0x10000, 0x80, 0x101], [0x101, 0x3ff, 0x7, 0x80005], [0x1ff, 0x2, 0x7, 0x10000], [0x2, 0x2, 0x9, 0x3]})
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b40dc000040dc", 0xff0f}], 0x2, 0x0)

06:44:34 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7c15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1834.465355][   T27] audit: type=1800 audit(1580885074.614:3998): pid=22317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16673 res=0
06:44:34 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r1)
fadvise64(0xffffffffffffffff, 0x0, 0xeaa, 0xf)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c81, 0xfffffffffffffffe)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r4 = dup(r3)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c81, 0xfffffffffffffffe)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00", @ANYRES32=0x0, @ANYBLOB="aaf200000700"/19], 0x5}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000d2800"/83], 0x3}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x48, 0x28, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$P9_RSYMLINK(r2, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x0, 0x1, 0x6}}, 0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x7, 0x4, 0x60, 0x80, 0x0, r8, r9}, {0x1ff, 0x7, 0x5, 0x4, 0x8, 0x1f, 0xffffffff, 0x2}, {0x800, 0x1, 0x0, 0x9}, 0xb5, 0x6e6bbb, 0x2, 0xf0ff563441a26850, 0x3, 0x2}, {{@in6=@local, 0x4d2, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x2, 0x3, 0x3, 0x6, 0x401}}, 0xe8)

06:44:34 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:34 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff80000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
r1 = socket$kcm(0x29, 0x1000000000002, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0xcffe0000, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x140000}], 0x1fc, 0x0, 0x0, 0x3}, 0x3400}], 0x2, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={<r4=>0x0}, &(0x7f0000000140)=0xc)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x26, 0x0, @tid=r4}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r6, 0x89e5, 0x0)
sendfile(r1, r0, 0x0, 0x500)

[ 1834.763941][   T27] audit: type=1800 audit(1580885074.914:3999): pid=22434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16519 res=0
06:44:35 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfa0}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1834.902646][   T27] audit: type=1800 audit(1580885075.044:4000): pid=22443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16956 res=0
[ 1834.931698][T22438] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
06:44:35 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x481})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:35 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb000200}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:35 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.Hfile0\x00'], &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1001004, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100))
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r4=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0xffff, 0x8, 0x9, 0xfffffffe}, &(0x7f0000000200)=0x98)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x32f88f2, 0x0)

[ 1835.155486][   T27] audit: type=1800 audit(1580885075.304:4001): pid=22548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16518 res=0
06:44:35 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9a02}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:35 executing program 2:
memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
sendfile(r2, r3, 0x0, 0x81)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0x8, 0x6, 0x6946, {0x3, 0x7591}, 0x584, 0x7ff})
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)='X', 0xff55, 0x40, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0xe543e857fec4ccdd, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, [], [{0xffffffff, 0x5, 0x6, 0x2, 0x3}, {0x8, 0xffffffff, 0x41577960, 0x200, 0x4d, 0xfffffffffffffffe}], [[], [], []]})
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="cb", 0x19fff}], 0x1)

[ 1835.331631][   T27] audit: type=1800 audit(1580885075.474:4002): pid=22562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16502 res=0
[ 1835.416570][   T27] audit: type=1800 audit(1580885075.564:4003): pid=22665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16817 res=0
06:44:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

06:44:35 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1100}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f278785b95fc6b8bf730e48723d2e2f66696c65312c7570706572640000009fadd11b6b207687a5a0541d7875990a"])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xbf3}, 0x80, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x1000)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = open(&(0x7f0000000480)='\x00', 0x0, 0x11a)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000004c0)="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")
ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000300))
lseek(r0, 0x0, 0x2)
r3 = open(0x0, 0x0, 0x0)
fchdir(r3)
syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x100, 0x400)
write$FUSE_ATTR(r3, 0x0, 0x0)
getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "949ff619d49c27ca", "3f12ae6406fece1b0b70b03629515c7c", "c3150b0d", "cd507427b9a21a7a"}, 0x28)
sendfile(r0, r1, 0x0, 0x40d09)
eventfd2(0x0, 0x0)
syncfs(0xffffffffffffffff)

[ 1835.864935][   T27] audit: type=1800 audit(1580885076.014:4004): pid=22675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16802 res=0
06:44:36 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:36 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1835.986949][T22680] overlayfs: unrecognized mount option "wo'‡…¹_Ƹ¿sHr=./file1" or missing value
[ 1836.086791][T22682] overlayfs: unrecognized mount option "wo'‡…¹_Ƹ¿sHr=./file1" or missing value
06:44:36 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68)
r2 = syz_open_pts(0xffffffffffffffff, 0x40)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)=0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004, 0x110400})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

06:44:36 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:36 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:36 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r1)
chown(&(0x7f0000000180)='./file1\x00', r0, r1)
syz_mount_image$iso9660(&(0x7f0000000340)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffff92, 0x3, &(0x7f0000001500)=[{&(0x7f00000003c0)="cb4adf0411d778c98dee800425cb8a69ba8cf14b16395f5b569766dab9eff5f6de55657bc19f03e6d971dc5d2addbfee996c8212a80b77b9d334113f40c86f3ab11d4941e00352dc44284431cabc434fee845f234fe4be96fa7bc54d630cb1275cb0aa9e5cf4f1bbdc7f56386161bc1fa0e5d6afa390fe1e39c7dac87b3db2ab5491a9f2d779b9", 0x87, 0x2}, {&(0x7f0000000480)="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", 0x1000, 0x2}, {&(0x7f0000001480)="f7c6d4e7ce101fde4fcb9926cfd4ae1a294a8ef401352e16d3971fefeade504e5a7c7c248c4d1885231a7d91b861a08ff49f33f2d71d589c6776b933ffce6bd904a6d9a1563d8844795c9485819c0d23d22ba2fc", 0x54}], 0x480, &(0x7f0000001580)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@map_off='map=off'}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@map_off='map=off'}, {@nojoliet='nojoliet'}, {@check_strict='check=strict'}, {@block={'block'}}, {@gid={'gid', 0x3d, r1}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]})
r2 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r3)
chown(&(0x7f0000000180)='./file1\x00', r2, r3)
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r5)
chown(&(0x7f0000000180)='./file1\x00', r4, r5)
getgroups(0x7, &(0x7f00000000c0)=[0xee01, 0xee01, r3, 0xee01, 0xee00, 0xee00, <r6=>r5])
r7 = getegid()
setregid(r6, r7)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000300)={0xa, {0x7f, 0x5, 0xfb4, 0xfffffffc}})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b642e2f66696c65312c757070657264ccc7455216d8bcb8cef169723d2e1d66696c6530"])
chdir(&(0x7f00000002c0)='./bus\x00')
r8 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
socket$l2tp6(0xa, 0x2, 0x73)
accept$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
dup(r11)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000040)={0x7, 0x8}, 0x10)

06:44:36 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1836.731290][T22712] overlayfs: unrecognized mount option "workd./file1" or missing value
06:44:37 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xe402}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1836.824277][T22714] overlayfs: unrecognized mount option "workd./file1" or missing value
06:44:37 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = dup(r0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x452)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
getgroups(0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
creat(0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
keyctl$clear(0x7, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ftruncate(r3, 0x80003)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000000200)=""/191, 0xbf}, 0x2}], 0x2, 0x40002160, 0x0)

06:44:37 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:37 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000b}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:37 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = getuid()
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x248102, 0x0)
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="4197f67df26260dc7189bc73c28de95a580209c81e3acc65b5da8635b98efcf37bf249ae4e291e5300c543ada5396d8d0f89833a65f5c9739158b366a74d7945e29da1163179969a62c43f43ec58b410ca5dd056c7ea491ee3d9abfa60e07dad78fc31199e368fa413927af587aa5cf3b504d4fff64240bedbb7e41239b3c3d6dd57041db07d", 0x86, 0x7}], 0x1000040, &(0x7f0000000200)={[{@case_sensitive_no='case_sensitive=no'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_recover='errors=recover'}, {@show_sys_files_yes='show_sys_files=yes'}, {@dmask={'dmask', 0x3d, 0x37751fa4}}, {@fmask={'fmask', 0x3d, 0x76ad}}, {@nls={'nls', 0x3d, 'cp869'}}], [{@subj_user={'subj_user', 0x3d, '}###'}}, {@fowner_gt={'fowner>', r0}}, {@appraise_type='appraise_type=imasig'}]})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
socket(0x10, 0x0, 0x0)
quotactl(0x80000000, &(0x7f0000000380)='\x00', r0, &(0x7f00000003c0)="9fca958f3996cd39568df1d9a4742a2573356fcc460323e3dfa27d3a677bb024c6103900d53b47411b64e960e23dc9f58b8f19a8aa265916bcefd46ea5af6edd39c8821061f666dd0028905da496377c104ac0231b6e6d44a529375b4f470da36f8ed146b62815631f3919f1e4dc1d9708cc211a8250")
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
ftruncate(r2, 0x200003)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)

06:44:37 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1500}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:37 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffff000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:37 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x11000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:38 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x13000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:38 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:38 executing program 2:
fchdir(0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f0000000440)=""/70, 0x46}, {0x0}, {0x0}], 0x4, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}, {0x800, 0x9, 0x0, 0x2}, {0x0, 0xde, 0x6, 0x2}, {0x764, 0xfd, 0x30, 0x7fff}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = creat(0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x208800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xe801}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3})
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$llc(r1, &(0x7f00000003c0)={0x1a, 0x204, 0x4, 0x7, 0x2, 0x0, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x62ae80000000000, 0xfff}, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)

06:44:38 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x14000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:38 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x157c}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:38 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1838.804016][   T27] kauditd_printk_skb: 15 callbacks suppressed
[ 1838.804034][   T27] audit: type=1800 audit(1580885078.944:4020): pid=22779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16533 res=0
06:44:39 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070")
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet6(0xa, 0x800, 0x7fff)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070")
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x67, 0x1, {0x1, 0x3, 0x2}}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d)
getegid()
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x3, 0x401, 0xfffffffc}, 0xc)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000001640)=@fragment={0xa9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x68}, 0x8)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$void(r6, 0xc0045878)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x20, 0x20000)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
ioctl$KVM_GET_NR_MMU_PAGES(r11, 0xae45, 0x10000)
getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f0000000100), &(0x7f00000002c0)=0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x5, 0x1, 0x0, 0xf, 0x8, 0x1, 0x4}, 0x20)
r12 = getpid()
accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f00000003c0)=0xffffff50, 0x80800)
ptrace$getregs(0xe, r12, 0x250, &(0x7f0000000200)=""/93)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000540)={0x8, 0x0, 0x0, 0x1, 0x8001}, 0xc)
setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x5c)

06:44:39 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:39 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x15000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1839.066939][   T27] audit: type=1800 audit(1580885079.214:4021): pid=22786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16899 res=0
06:44:39 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1839.284478][   T27] audit: type=1800 audit(1580885079.434:4022): pid=22791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0
06:44:39 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$radio(0x0, 0x3, 0x2)
write$UHID_CREATE(r2, &(0x7f00000001c0), 0x120)
fsetxattr(r1, 0x0, &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1)
r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x200000)
r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xc80)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c)
ftruncate(0xffffffffffffffff, 0x200004)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10)
sendto$ax25(r3, &(0x7f0000000640)="d07f8f887506a650752266d70d1cf838f99ee569b2d39cd24d9e2c6c8e3e59abd9a015c82a0d3ac46296bd1c2f752334e5c981c0d684cf1cf1c9a2d8b93fdbe8b652a1dad7e96570b7820720fc99497ebd0e4e4ddc52f0187aee8c090bba6090f800d7bf539fc5d431fadf5e82e0eac5f279efde2d1afbdac25b7b276bc231135bae4bb76c032475065e6b6a18731d73d04c5d147ad98eae1c142935b56b0e5d21e3f4b8bfd912e8d366f04ff03810c406f8ade036c80c5eb90000a27792c97d416e4037acc4cfec5c1f8009b9c57f6c39330500000009", 0xd7, 0x24000851, 0x0, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r7 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x81000000)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000340)=0xda9, 0x4)

06:44:39 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:39 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1f40}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1839.640510][   T27] audit: type=1800 audit(1580885079.784:4023): pid=22804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16579 res=0
06:44:39 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f0000000040)={{0x0, 0x2710}, 0x12}, 0x18)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)

[ 1839.813939][T22810] input: syz0 as /devices/virtual/input/input26
[ 1839.856480][   T27] audit: type=1800 audit(1580885080.004:4024): pid=22811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16899 res=0
06:44:40 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x20000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1839.987412][T22810] input: syz0 as /devices/virtual/input/input27
[ 1840.089406][   T27] audit: type=1800 audit(1580885080.234:4025): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0
06:44:40 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:40 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xff0e)
close(r3)
r4 = socket$inet6(0xa, 0x80003, 0x4000000ff)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4)
connect$inet6(r4, &(0x7f0000032fe4), 0x1c)
splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0)

[ 1840.312119][   T27] audit: type=1800 audit(1580885080.454:4026): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16593 res=0
06:44:40 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:40 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:40 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffff000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1840.710363][   T27] audit: type=1800 audit(1580885080.854:4027): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16518 res=0
[ 1840.761759][   T27] audit: type=1800 audit(1580885080.904:4028): pid=22838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16546 res=0
06:44:41 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_team\x00', 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x105000, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000851498ce189373aa4b62bf4bfae7a6dc48d1fec6e7d3158eb773b6be6cd34daf99722798a7d5b2f1a9684f590dced80f4267d351a206d3cb19965ba5da46cd8ed1efad56dcfbeca8ff544bd059297177cae95e492187d67c627c45b23be3c0e2", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r15, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="28001a00f1ff240800004200b12f8e91ee8666b8a45eb4927a", @ANYRES32=r15, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15}}, 0x20}}, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="e4a9751bd18cfb0774d355a524c0f0ffd00a39405583aab7da211a2f77115e844713a088356985a74ea769b3526366b5ad41805d732cc33103f6c9da420f7265785b417c8e5c1e40080125353a0d9e0714208ca3c11d8872a1d71bf504a75517aae6793c77588b33d3375281c877d8ed87ffed9ae97cf6151f3486fdf72d613a3edd4638ede5f23be4e95612802e7d010e4280b9faaf07b2beb3dd521a1aad8dd557379e8c3a2f255980d813ccefea0247dccb7648216aeb4cce274e765790a4b841c88b19ea4498f1efb0ed525071a250a571ba25b13d36356f7a", 0xdb}, {&(0x7f0000001300)="cb47a9a8ffbc0298d85cb7e9f3459e28f6427492dd8a863bb35902050402cadb78573a6d995d821961170ffd99f204a698be5e056362024eb66a25314b0f36dc234228ad4e98d0c34bc56f71b4919ba3c8a622169f8852ef75298eae3c9e368f3c748f8f664a2fc6fe2ff4a407498593f98e4bb0a0bb0a3a9e7f52b29c643d6ae39222d844c631eb91e600ba38c5be681d795f53ff2167bd2323ac968a296d59b415a3a4be205fb4b55c8a3d521bcf4dd1a418d7fee00de98d48f675568303ea7c07f8cdcfaee055e9cf301ce8d68f9eebdffb0bee406bfdaa1c1b500db7fc9fbb41d6314ba70280c1d2a6a7a5b11c76ea41dd2edfed0a503d2b2d7c87d29c108f201811ac583c9b4156bc347f210bd8e489f0c1e48fd448700697260132f5c3426f66b0315b86c63ddb24c643f3765aa44a3b5d72a137cac39c5431d6a3a5a64b247a3edcd3044de73a956a4e1593c3a5ce9459c162a5ea99ecd2d0193671a75b77f3b12e335a7fc1dcb7825552ec650937c3f7db859320cd4b51aa8939b6ca6fde38c1cb724805421352a757c1252e69b49c5c18994adba36c071beab0d61dec648cffdb358aec6572cb154add8cd40f62572402314c23e5b8535418952a41b3490059538d3d2b2995491caa9091a1f19128847191cc68c88aa64c11ec7ee5b695c575486699f6307d546dd2d52ed48d4240c3cc3523f995e1072ca49ddf7db1281f2366cdd3fd8b2215838e07011a129d6398caa608434dff0a9a879a3bb965b9e1285f71ca036dc9867039cd22e0c68a4b3127797df1b289a94b14ba4b06fe5d8b04e88c8c7b63b48c051e28f317489bc9ebf9018441831da9102ce30c5f0b4e779316c4fa7d4651d5c616b85f68e9d009d03cb46e0dd9c4e1bb851f2d64bc44a55c555e9ef438dc49ea9c8de04e89cde49b23cec1fe7067459eb78e9e49709161ebf4e95c95a112debcac86549fc40f7a2b882e250015f32007b4806dc9489ef1bd6e31f74b52da5c5a9e9d2924d0fffaa1155dc8dcaa7c47e681e7fa743314696d4aa37d5d4ec845df11d0559b5e15e8c597af23bd1add14df97402fe3ea30e7fee42be9d855201e5a4773ebb122c9ff1e0473b6604582976c0791f17d220a6a3247aafbf1137e1bf2711739269861c5cf69ca6e7520891a9328356dde219cbc96d929f93ec458304ffd30303548db8c6bf1f3dccaa7913113d7bb39823861ad7544359dc6984051293137bcf0e9fc105b22eb0c6b83de77d7f90c7ba1d74f803a2cc37aabe8fd8a25aefb79d2aff8a118fd8c2862918c0e1f8d42342b73030cc06e271ba83906d193b44b51431705eb224e99d3f58174e3f7f21d2daf17b7c0a95ee2aee6ddcc767559a0e576010b96cc430251c497a484e6945468980208c0c5135d630beffd239fa8a6166329d0718206947e20c956e42f8fe8ee42ffeb15c4fb229c892fe5f25ebc24143e464154e930314ece90a87536ef72b59efa222352ac419fe0f58f9e41fc9933e30e4b8fdcc41413c37cb9ca2ddfeffcefbc5ed60e3603c19ff275f7ed69570afa20616088cbfd228f20cb84d5ecdcaee25d68fff239c4f067ecbd15bf1bd8d64b209bfa771b4c79ebc5a2dbd8c46cf121aaca256fccedee7a350a4fb1a41cec412c2281a7b4aab42c3492489fdff90278303bfc89a48a088c161d912d4881597dc73cee06c2f3699fc6e316fe77c0aa5d928e9801e649171a47573afaaf5286177f2188fd5dcdf087abbf87fb958705a2baa668eb2ae2f68aa1e08e217474a3f166e6a3e394d45cd472359bdb2d46ef87f58abc656b632a2032a71290b5e387b2517a169df32023b17c50eda6df29ed5ddd38ffc31b277ca1a9ed0213d41996859df5c438b0741d4a5c3d761f29f70e67f878b8da7f4171628cc198dcfd358a5b04a5236ebd59c0dc7c07548e2e983af52b076044b3b5d577b03e25cc49d78ed0ac5d860466f02436e984291d510d56f9568ace4221173e8c69e1954ceffd938a83709a8e3a3b620f03509e77e712fa0edde8b95bd1aee8788565e145d00f2e4a54bca7ed7c8054b01d483169e9820491de74b2323b60b901df170d473633b0945aa2eabbecf3b59bf8bf2f33062af45e67005cb5c0d878d88436e436f70f5ab49a5bbf667853448816b0001c63a9a016f473a7120bb07d95da44c84f267f8a078ce0ad0bff3e59ac94159f05aee3939f6a1223757fa107007ef3c54747c59fee69730543c66cec14452dd496683cb1988e5ebbd79613800d4880dc1ec6405b373869fabf6efd613bb870f128c4ec778a4619691f9059e3efc26e6511b242d6813780f19075018466202675153efe7689f3cfb0324506d01ac588c526b685f16444e566925635dbba46340e753cecec50e85a7ed091fcda5485fb3e07cef20c1b703d708558f33d0944093acd227ff28cb354afe0b16de7406d33084c41bfcd242dd9ebce7fb54b7fa4baf0d1b427555b5f7f12b7a8db6deba54870d350f36c2081e8a8105f7505ad6bcdd5c330f9878aef96e563f081e05ba5a8dd499dbc266853e3796906744f4378f1434010d1dc1c9625e293551758a003cf104e5834fa12c0f30f81426f28b2bf06ef5bce4c675a95d15f3025bcf68ef5d44e490b0b2e187f31414facf3e7f342e45b0a64b5c750c1f5cf6622991e94e3cb01a60c4c9fc9045db65c3fb30b603faf15453ba0a0b4b936430cb8f2a32d542239492ed484147eb70861a762512d583ca8ef1dc4ece9ddfcbfe6d4c797677bde100caac748f1f50cc83c2a52d8565cda896ca009e83723d082243a2e6bee476ad684a5b04f9eea395816d0d6a3d1c49750595997b823affb1b0de5bd42b4603a07e0cf48b2d9cbf90e4df20beb713b44bf58e64a0249083a4479be48ee8a124c13a6d35e43dc47968361e44432fda3d611c6cba24e05dc0516b5cabf762f5b85387974c06537bf80e1ce870bb2515f320316794c9361121ca8d05abb48ade8a33de66a290101b55438d88369450d3ef6f0b2f2ab22228b26444d002988c2370b338289efbd53316e01cfa47c45b3aa82d1af899feb09db28d236fe47b48a5305f65d0ada8e0927be7a0979a506e85b28b9a286e06d1372398f9f74277099ad345a6e2f78fb2453d8bb2ee436034fd86c07d5f822518e0a5f2b59960d419ac5c2eb3caf778a1fb71461f826be948b14bc8014831c39436d9b6c9d1da1f069598abd06de4afcfc09168e7142c07788e86faf43cdbc989b334acaa049cc60706c7a4c8e4bf265728779c09c6dfc5132944d1a3525c5ebf730f67735cfcc859f30ab23538699c67bdec8d3956b153f1be94b57eda1ca1cc4b6d1378aaaf4f6589ad006530ae56c144abb2c08455f68b37bbe676ddff1b3f0979bb8285a63c4eab51c3f8e6e1813750605904ac24f6d01b37b4c4353660b5379130256e6fd1d4882bad129e484b2acfdeba914a526f974914260c5a9713524db87ee9fc67033fcbdaa71c5aeb4f9ec45b3883c925c1ab27d093ebf23f7c9bd1a233edec702cbe71bd913132297eb56ebc1bb6b0da26d804ada0726dd4f2b4456fb2019ebc9ece8ae4e06afe90730b7fb76fc13006ece48a5027adacacb34daf8c8fc6339da28f367f97b5a0b15ad8ea7fb86f4f22222bc4bf6e6ec98332a8842099dfacad9ea999d6ad1bfe67563d531890d480b729e493781057ceb3ebc7577f9d6b953adc99f55f12c263653a3e7bec41e29959666329c5a29ec9d0c2e754e8e34eb5033ea7b008e653acc23cefb871bfc9d6d8c6168c1c7e30b30bc1df07b1cba5a0a397ec886ecf4c004b99dcbd35ae28a61984f7d7b85d14a7677e5c4c8a6bb04d0eed4e217ce29caeeaa73ea79136072080b7d72f2ad5c6370d0d68412890189651a1f52bdb18bc8aee14afa2b1bf2e25b0cb57569ed899db30ea1c77ebef7b9b2c12cc186403711016c585303d00599bef1b2471168f08c90571aa2f18a15703b70077b7d0070aa53c6f087b2b4f6e0993c2900606ecf747c5ca3b8edd3551c0233bce77e363395632252e19ca401c3b95f65ff551d7f55dc20b8d1719d272ae9fbdbf7d4f487e4c6e83bc58b066a1979cb36b20e0435f9e2cfeed631886468f6f506d3ace8e874df027fb6ef0e2aa2e7a2667ec91ac48a00b71afef2ff50cc69f22c9214e41a69a4f738fbb94eb2256f49546814ddda958a207e539c0be48c7e58f0e94e82d8dc2fe38b2f80f5ae006338a24fa17f3b08bca29b0a85323cbad6cdf6338e313cca7c8446dd8aa2d4c4d8d31bd2cd09f5de2eba34c40e2e71d8e0785538303b166e2265ba9eb228d39de0ac35bd03e606e183369034daf16fcc09f2ee6ff1832d9f40894360567ac7a7cd55238584bcbf94a11d830aaaf092bee3642345da7481f20c68b28f79a93f62be6fb406c2855d10e48e67a9ddbdbdec8da548134d5ccd695d0cd7b3486db12798b74481f94ecf52affac2348e8869a4f3a2be9dac8a5e400e905d96d2b77c568a18b151c992d480a8098bc2bf8c09f47bd23b03e99bdaaaff638d4b88ff475b3e073c6313196105a8616daff58f0806d339e9a95a400410e92d083c18bb357922e58a8c43776f76e95e59dabdb4e0fe344db4a2de06b9072b8a9d232682cfaa463836b8fa723d6d879974c1fa44fcdefd579ba2bfc1caf998cb85081ef0b8d3702ff6d1bd02858de5072a83446e2ca38bb58f4d8c2cb1f48cf62109483b6478d88764e01d4de69e6f170e56e957032dc2eca8e13610846e75ec18af259cd3edca98da8d3264113400ad2f314e7062f123eb303a47fa975e7c3de26a79e3577cde3fed597c3ee85dc078aec83e5ddeec98a033c2816af823189f8274e9856803e01da21e0b7cffdb9db2484a6a27d47e8a46002f88fd2838a3fbeb2866c150c354e0d2912168f0b6cab835fee9af2930571aff10579bfe27ede427f9b55fa981d109ebf8ae8f3ae7dfd7043ac57d232b6e29b836752cec4f79681448e9e857c8a19acc7ebca290b9bf46898f22764e399c73ca4a9d14dbe264bf952e10ad6a6c2851c0af809957541a161f2213027d372c6119445496deb5707137aa78f36f90dc2e0530ccc7356e972801a73c85f53a46cebaf31259186222b5f498f9bd1bdc00debf75eb2beeb228a9b026dd9774b3661fd10bc849d2339abb4ce15a210d439e59a934214ddb1a950d72bc5ce9af616fccafdedcaadd29e604d804430604ab42bb25b77e41fe99409ca92d657b434b6704627d928d6e0b435042c2f3a98a92ee3e4dc3b5e60e0cc60ba4c9e623aedd699cf41fedeed24dc2a26c7d6b9ad7c2e89b9cf95f27eead22af18b5811e049c238fa698830dcf49773d6ed7f141d4ad431f7b82c94aad9558042ad4d4f2ddd29bdc9eb519974c901d4c91128f69d28d41d8d6de64fe1a8443d16e8abd18b33ea512fb1aef84aa4082235337de487ba01db6ee5cbcc30cc713c94cf55f58f1a3de90d0e33786ce60f8354b272a0c2f3c727c87b5664fc69ffc9776efddf69c18339b807f37b525877eaeb2ce16966be5e35cf18f0d4ed6b83bc43e915087c499f92da63561d2426811b617baf8c06287e8d3adcc2cc3494d40f45bc15b4633c798ea9c5bc703af7386584bcfca38690de4429295e1a4c26eb972819032569bad7e1f7995bd4d448b4aa8751eac3da08d1c56f5715ed64b93c5706babdb498770621b5d1d64574a064da524013aea21e5b9c6aeb21482e86dfbc087d8fec6c05ef4444f0480f1825090442d919524b631b26d6dc01e0a4d1748534b7a", 0x1000}, {&(0x7f0000000340)="29a841e92e79622507686acb24ea669a8447900aaaaa2a6b8a18875d18b50173eacad6ed6389a9128630271135ddb620933eaa0e8d85c8408da782c56e9d7845ccaf3dc724ca41312b5f91c5869c4862c56af44a00188e0a409e9dd1c5d194ce9746fca14525eb03472a736eb684bf17a0c7fe5e73fc9640da90125d5340edfaa856a3c7bf2645266c02358d547f772233a558608787b6b5d81d", 0x9a}, {&(0x7f0000002300)="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", 0x1000}], 0x4, &(0x7f0000000400)=[@hopopts_2292={{0xe8, 0x29, 0x36, {0x84, 0x1a, [], [@ra={0x5, 0x2, 0x2}, @pad1, @pad1, @pad1, @generic={0x2, 0xc1, "160fb4fa750b4ca18abe34225ea93c18a5af96e517d33a072d09cce8a5acd5526ac17e2ce6e1ffb9162e3a1e8539686873f1b49c2a7f6bc41a5331a8ef9633b2f4e7d4c3f97f57b5531d3ea716dc6a4ded1af31ea7e656f08bf26b6815a5ebcfd2a3995ff8eb04eca29713050d36c9e897a5ad1dee8f000b89d1aa57cef716d9229121af46ad2b8cd50b674e1fe8cd1c771b7ebdb38be100d7371964e216003508b0951f5eb62512750ef487b4b849b72b38da524711f8557e3bd6e055679fec41"}]}}}], 0xe8}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000500)="b60e582e8780e2fd98fa50135be59a1b9d3288953a4ea4f38f98ddef25576c440098", 0x22}, {&(0x7f00000005c0)="73876fc051424913b315ab3243f0fb41904572ca42fbdf2572c23c79f3400e42fc98e1f13a93cd71f3c193edb69ca58bc17ce311b8832a6cfb8c806801c93ab693cd11a69696abb6786663a915958ee721eb40ee3f7568224948d0e440601293269ad1d78eac37d57d8ce076d198ac4db3fa08e9f38a6757ae5d79238fbd3f69af2902c2fff4a82509edc917f19ff34b53e3886fc5c7fcc8bf6037e5969e4f52aadf517e458affffab73dc0004f62398c0eb8817365864d5f659c9", 0xbb}], 0x2, &(0x7f0000000700)=[@dstopts_2292={{0xa8, 0x29, 0x4, {0x14, 0x11, [], [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc7}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4f, 0x480, [0x6, 0xe1a8, 0x0, 0x158baacb, 0x143dd34, 0x8001, 0x9, 0x6, 0x7d]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x2, 0x7, 0x0, [@mcast1, @rand_addr="75109e1ea43beef867ca57344d9b53a4", @empty, @local, @dev={0xfe, 0x80, [], 0x24}, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r10}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, [], [@ra={0x5, 0x2, 0x200}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r15}}}], 0x210}}, {{0x0, 0x0, &(0x7f0000000680)}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x200, @mcast1, 0x2a2}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000a80)="e72bf5f2718db90d154a9c3687dba0863861c22720d8aeec8a489a7fbf9b5d5fe3d1a3d9d1840f96f536d528ca54966bd4ee49562fd6ae2e923b1df053cf5a735e3fe80a23ffbdc043484b9000ae7756f29c62e6f4aa49c81985934b39b0c6268738c4be501181e3176f51086fc5313892af", 0x72}, {&(0x7f0000000b00)="58a4abd4c4bcf1ed00cc17f12fd8e46bb7a3e1056bc854c62db700b1d9770e9236175b96269ad589d0010b8a351e46d6713e290301b9138d5152b24058415bbae876f524d2b037208374a8a107ee57d3eec677c24482c0a690f98b58a59ffbd2f428b644c9284f0e90988a8e7aecc65fc8d126ca0d6056a97a89e4a5e08904f574332d2c60917e0d4979c5209da2fcb552b1d66a3db537a67a58098e0148f9a275453dcac002fcdef487fd25af91d16e448664c0b5cd6a51c2f3570f", 0xbc}], 0x3}}], 0x4, 0x24000011)
r16 = signalfd4(r3, &(0x7f0000000040)={[0x20]}, 0x8, 0x80000)
write$binfmt_elf64(r16, &(0x7f0000000200)=ANY=[], 0xffffffffffffff84)
write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB=' '], 0x1)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0)

06:44:41 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1841.024249][T22844] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1841.080424][T22844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1841.090076][   T27] audit: type=1800 audit(1580885081.224:4029): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17154 res=0
[ 1841.158951][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1841.180786][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
06:44:41 executing program 2:
set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
syz_open_dev$admmidi(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8026}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x18100, 0x0)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x80000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={<r1=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="8400000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e4025b3815ee0acc7913ee2ce73652768ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fccdb9c0956189f61a665193d9f0750d401ca541518287af4152451385a7232a000000000000000710c75eaed55f013274189ea5b408f7aa174683e588b346b975092722"], &(0x7f0000000080)=0x8c)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0x9, 0x8})
fchdir(r2)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000280))
umount2(&(0x7f0000000540)='./file0\x00', 0x4)

06:44:41 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x401f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:41 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x401f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:41 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:41 executing program 2:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000240)=""/170, 0xaa, 0x20010043, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e000a0002009d0edc2976d153b4", 0x235}], 0x1}, 0x0)
syz_open_dev$vcsn(0x0, 0x10001, 0x10000)
r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000180)=0xf000)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r3}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x11\x00'}})
keyctl$search(0xa, r3, &(0x7f0000000040)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, 0xfffffffffffffff8)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r6 = inotify_init1(0x0)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
getpid()
pipe(0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
ftruncate(r8, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000040)}, 0x8)

[ 1841.802602][T22873] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
06:44:42 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1842.002994][T22873] debugfs: Directory '!' with parent 'ieee80211' already present!
[ 1842.154515][T22879] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 1842.203078][T22879] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1842.247332][T22879] CPU: 0 PID: 22879 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
[ 1842.256437][T22879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1842.266506][T22879] Call Trace:
[ 1842.269838][T22879]  dump_stack+0x11d/0x181
[ 1842.274206][T22879]  sysfs_warn_dup.cold+0x1c/0x33
[ 1842.279213][T22879]  sysfs_do_create_link_sd.isra.0+0x11b/0x130
[ 1842.285321][T22879]  sysfs_create_link+0x5c/0xa0
[ 1842.290108][T22879]  device_add+0x514/0x1040
[ 1842.294549][T22879]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1842.300470][T22879]  wiphy_register+0x12c9/0x17d0
[ 1842.305725][T22879]  ? kobject_uevent_env+0x1f1/0xc80
[ 1842.311013][T22879]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1842.317278][T22879]  ? ieee80211_cs_list_valid+0x10a/0x170
[ 1842.323115][T22879]  ieee80211_register_hw+0xcb5/0x1ea0
[ 1842.328597][T22879]  ? hrtimer_init+0x59/0x150
[ 1842.333519][T22879]  mac80211_hwsim_new_radio+0x12d2/0x1ac0
[ 1842.339287][T22879]  ? kasprintf+0x74/0xa0
[ 1842.343557][T22879]  hwsim_new_radio_nl+0x63d/0x890
[ 1842.348618][T22879]  genl_rcv_msg+0x413/0x900
[ 1842.353178][T22879]  netlink_rcv_skb+0xb0/0x260
[ 1842.357928][T22879]  ? genl_family_rcv_msg_attrs_parse+0x1f0/0x1f0
[ 1842.364454][T22879]  genl_rcv+0x32/0x50
[ 1842.368454][T22879]  netlink_unicast+0x3a6/0x4d0
[ 1842.373242][T22879]  netlink_sendmsg+0x4d3/0x8b0
[ 1842.378054][T22879]  ? netlink_unicast+0x4d0/0x4d0
[ 1842.383037][T22879]  sock_sendmsg+0x9f/0xc0
[ 1842.387526][T22879]  ____sys_sendmsg+0x49d/0x4d0
[ 1842.392457][T22879]  ___sys_sendmsg+0xb5/0x100
[ 1842.397102][T22879]  ? __fget+0xb8/0x1d0
[ 1842.401249][T22879]  ? __fget_light+0xaf/0x190
[ 1842.405865][T22879]  ? __fdget+0x2c/0x40
[ 1842.410084][T22879]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1842.416391][T22879]  __sys_sendmsg+0xa0/0x160
[ 1842.421065][T22879]  __x64_sys_sendmsg+0x51/0x70
[ 1842.425852][T22879]  do_syscall_64+0xcc/0x3a0
[ 1842.430398][T22879]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1842.436371][T22879] RIP: 0033:0x45b399
[ 1842.440327][T22879] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1842.460046][T22879] RSP: 002b:00007f313952fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1842.468468][T22879] RAX: ffffffffffffffda RBX: 00007f31395306d4 RCX: 000000000045b399
[ 1842.476511][T22879] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[ 1842.484550][T22879] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 1842.492539][T22879] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1842.500519][T22879] R13: 00000000000009c3 R14: 00000000004cb348 R15: 000000000075c07c
06:44:42 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4d01}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:42 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4d010000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:42 executing program 2:
setfsgid(0x0)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r4)
chown(&(0x7f0000000180)='./file1\x00', r3, r4)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r7=>0x0}, &(0x7f00000000c0)=0xc)
write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x5, {{0x2, 0x1, 0x10001, 0x4b7, 0x3, 0x4, {0x0, 0x3, 0xffffffffffffffff, 0x4244ebda, 0xffffffffffff85cd, 0x6, 0x8, 0x10000, 0x7, 0x1, 0xc8, r3, r7, 0x5, 0x28f}}, {0x0, 0x8}}}, 0xa0)
r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r8, 0x4, 0x42000)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b71, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$vcsu(&(0x7f00000007c0)='/dev/vcsu#\x00', 0x6, 0x200)
ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000800)=0x8000)
socket(0x27, 0x5, 0x9b)

06:44:42 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:43 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:43 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000000000000000000000000000000000000000f3"], 0x3}}, 0x20000004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c0000002c00010700000000f3ff000000000000", @ANYRES32=r3, @ANYBLOB="000007000000000003000000080001006270660050000200080004000000000004000500400002003b0001000000df03008af42bcc2322bae4d3a6726a11becf04000000000400000000000000e62900000000000000001100000000000000000000000000000000000000000003e8a44d00006b8af1fa454921483b79b0ec762852a47e69e6408f53455bcd18d9db1843ab2a4d10abc395fa86f369a04912c9e69817f049ec6df0e44a2b27bc64af847665f32224e4d778548bc7cba4cbd65985da75ad8f3dcb3ee4b78dd97dc5e138da76d28c07639b67c57cc5df12fe95535049c0b8b14540d2f6ce65a7fae1373feec9a656cb299cf314f9403840172f9fe135594b0093820271d4b109e0ed578deec6cba9f67728d4807f9200571c60c55b2b85ee2089e7cca2fc9cd65ed0ad423e08bda7464465911ed73c0309ed6370f30a6d6bdbb5eb0ea1bc6b847ec171c8ffeffd8e079af1111c63139dd43109007e107357bb8e9d203cd094a8c03d49aaebb813fab55784a0e668a236062a3e81569802215779df6620b454da14b8ea41de0016c02872ebb2b95495cd537cb4b5fc7f90690f7b23e514b35eebebc0c7d00dc4bf2a89ade6dcf3daaf51e13d6f107c341c4b98eb3ea7fa6d44640f4cd69eb38a929f6f1acc88f865d86aead2fe2970651ae39c774f344b6e8cc333349fb745697bfa8ce8a1027f1301caa7b705e58c80b3"], 0x7c}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x25e, 0x0)

06:44:43 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x2})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x890})
ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f00000006c0)={0x0, 0x8001})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x8001)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)=ANY=[@ANYBLOB="758b626f8affda48584906735442a556c6f62fcda7fbb547581f0000008795ddf0"], 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7ff}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8841)
fallocate(r0, 0x0, 0x0, 0x110001)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0xfffffffffffffffd)
vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f00000007c0)="6348914689431cccfe3720ec41da0715c951cb9b9610833276998b04c0b677681fb4bbeea45826d90c6a8cab13", 0x2d}], 0x1, 0xf)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

06:44:43 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:43 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7c15}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:43 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1843.825956][   T27] kauditd_printk_skb: 9 callbacks suppressed
[ 1843.825977][   T27] audit: type=1800 audit(1580885083.974:4039): pid=22934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16548 res=0
06:44:44 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3da04, 0x8000})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff)
r6 = openat$cgroup_int(r5, &(0x7f0000000240)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x0, 'rdma'}]}, 0x6)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))
close(r1)
r7 = socket$kcm(0x2b, 0x1, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000180)=0x5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[ 1843.922906][   T27] audit: type=1800 audit(1580885083.974:4040): pid=22936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16754 res=0
06:44:44 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:44 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7c150000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1844.168796][   T27] audit: type=1800 audit(1580885084.314:4041): pid=22944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16533 res=0
[ 1844.286076][   T27] audit: type=1800 audit(1580885084.434:4042): pid=22951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17217 res=0
06:44:44 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x3})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:44 executing program 2:
prctl$PR_GET_DUMPABLE(0x3)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x1fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058710af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a", 0x36, 0xfffffffffffffffd)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040))
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000004c0)={"9c63222380baedfb9ce3b20a2ae73e05653e88a1c5f19b3a6e03dc88258d7b8f0ac6662fd7cb4a4480e635df9056e509e467709057f3eb20b5c2a41c3ce94e809e82911e7af5b9ca53b05500abc777f040ff0d50f8cfc1cba78cbbae4bb97e56785cd6b44e1c5d58569b0ad5e109b3e8c8068bb5e362d0e8d677dd397d7a287fa7655a293394fcf134da88e762688ad966fc1be5fb19bd0ebd9c7b3edca8df9e8db18e24e80578c9d8b60ffcc8c005e13c090080d6532949edb3ab7698bec747d7a7b5c3109c759b15435a46f6c96d6536bc3951d8365bbc2bf55c58a43de4bc16123bfe7a2b6d2f273050688608383b7bd8a5d5ea04480942b39f4025d1e9ba629e2a3c3a3a9c6e8118492ae950d439453ac1242d4806e370a591ca69f558a4dd34d6936bca496f2000aa24d212d187cb84dc17ff49afd48eb0d172a7c3d49697ce973aeea26024d496b155f534be3adb13cf247ba225a1c52ae13611f8128dd17100132ed991608a0c0f0cc7a544711c1a145fded5bd8a28742a9d0a9b17e8f60230a3dbf7019f75f37dc383d06edb898d6fd7e9c1350fde5ae9a332d971eb5bc8a438d6b9bec5ef0f1c0953cfc3008174cf24cd2556dbe615bfb7e255850ea3165c30016b8dcb2746c548eea4208cb79d5078c5cdcb2a83ccc10e37cc5beb0670faf64c0727470faecdb94850d3ca5830b9bcae66847664918f7e7e686d79517c2ffbd774140cd7b6bf79b896976864a438fb250a6fb78ecca5fdd37b345f89987cc6cebb3eb9e6d798c564a901188ac01624d581b3f51987877b609a871eae74adb9f9f6249995634d3f97a7e6ed2a56c177f3021f19dbb126a53d85905a9efd364fdf699dc28478350c1e50fd78cc5a13c605ca1400636795359943354f38824aeb2a28193e715d54baf3efa5fc4f66928797c618b6621910b9acd1510d5d1babe9cca28c88bf345a956aaac9b1eb68189d0897846652aabe68c2d2253b5c57291d412b7dad76f0eba1c0953d4d142ecc3f92d2546342047f42c31724c8f111c6840cc2bfff050cb32377c2a5c2e82256f5100a15e4e38aeda96128ef607ce654a1c2262f5c2d738e583f844aa98352fd064e01bd02c0822c58377fde6e101a6749979ba684fbe9129bc741e06a1bc2ea55fc2a7869af432f3d034966182ac5be915043b0db266af00e8398d502f6544997bd42ff664c34a472108162498c5492fcb28f71a13224db10f611bed5945f226497e54c0d6716439f0276f5dbada2ed7e914e3934000e8b67486bca00d3149a4935dafda8ef42cffb7ec8863ccbe6a1812af7ebec4c146f06ee6b0c2c202d3f278cf14351b3a16a6c8d7d389b23ec7c467799f80f7261b6850d0743425571b707f2ffb5a521a18ef53cd87d344f45d2a7379372ca57bfc8031332f2ad5561e8af4542d19e59efafe6fce9ad01"})
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x20)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000340)=""/135, &(0x7f0000000400)=0x87)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x102})
close(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x6, 0x4)
io_setup(0x7, &(0x7f0000000140)=<r6=>0x0)
io_submit(r6, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}])
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000000c0)={'\x00', @ifru_mtu=0x1})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x535100, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000))
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x12)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x612200, 0x0)
r8 = syz_open_dev$sndpcmc(&(0x7f00000008c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20001)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000900)={0x60000000})
recvfrom$x25(r1, 0x0, 0x0, 0x2, &(0x7f0000000100)={0x9, @null='               \x00'}, 0x12)

06:44:44 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:44 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9a02}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1844.828984][   T27] audit: type=1800 audit(1580885084.974:4043): pid=22965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16546 res=0
06:44:45 executing program 2:
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x400000, 0x0, 0xfffffffffffffffc, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6(0xa, 0x100000003, 0x3a)
sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac141403}}, 0x1c)

[ 1844.959074][   T27] audit: type=1800 audit(1580885085.104:4044): pid=22973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17249 res=0
06:44:45 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9a020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:45 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb000200}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1845.147639][   T27] audit: type=1800 audit(1580885085.294:4045): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16754 res=0
06:44:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x0, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000060)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)

[ 1845.218702][   T27] audit: type=1800 audit(1580885085.344:4046): pid=22982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17217 res=0
06:44:45 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1845.483183][   T27] audit: type=1800 audit(1580885085.624:4047): pid=22991 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17249 res=0
06:44:45 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:45 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1846.000527][   T27] audit: type=1800 audit(1580885086.144:4048): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17377 res=0
06:44:46 executing program 2:
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x5, 0x70, 0x7, 0x9, 0x3, 0x40, 0x0, 0xddcb, 0x10700, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f00000000c0)}, 0x300, 0x6, 0x101, 0x0, 0x4, 0x1, 0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='cgroup.stat\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x810c5701, &(0x7f0000001400))
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r9)
ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000380)={0x0, 0x1000, "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"})
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r10)
write$binfmt_misc(r6, &(0x7f00000002c0)={'syz0', "0dff03c64b6b182415bc923811611734a8906adaea672ea813d81cce6bc024372d6990ae9f327942cfb7e33ede62fab0a49ef7e1491faf35de14bc1f48cff8c41ca8e89112a5c5a758bbeb6a55148c397c35f31a2f3acf1a412ccf05fc437b7091aba069bb7ed6f9df07164c452a8921acf83919a65215b03257b98dfebacce753c54a0b"}, 0x88)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xd0f, 0x1, 0x1ff, 0x6, 0x4})
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r11=>0xffffffffffffffff, r5, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4a4, 0x6}, 0x0, 0x1ff}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0)

06:44:46 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x4})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:46 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xe302}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:46 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd1020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:46 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:46 executing program 2:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000100)=""/153, 0x2a, 0xfe63, 0x1}, 0x20)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=<r3=>0x0)
r4 = dup(r0)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = gettid()
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001600)={r8}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r6, r5, 0x0, 0x0, 0x0, r8}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r4, 0x0, 0x13, &(0x7f0000000080)='bdev#---ppp0vmnet0\x00', r8}, 0x30)

06:44:47 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:47 executing program 2:
getpid()
mlock(&(0x7f00007f5000/0x2000)=nil, 0x2000)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22014}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
fchdir(r0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0xa2ea)
r2 = open(0x0, 0x0, 0x0)
write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6)
getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, &(0x7f0000000100)=0xfffffffffffffe6b)
r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x80)
r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000300), 0x12)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0)
ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000180)=0xffff)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001480)=0xfe3e)
preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
io_setup(0x8, &(0x7f0000000280))
lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000300))
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

06:44:47 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000b}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:47 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:47 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x5})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:48 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x11000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:48 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x4c0401, 0x0)
ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000280)=0x8001)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, r1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000440)=0x3)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x100, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000400)=""/25)
r6 = socket(0xa, 0x1, 0x0)
close(r6)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0}, &(0x7f00000002c0)=0x14)
bind$xdp(r6, &(0x7f0000000040)={0x2c, 0x1, r8}, 0x10)
connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r8}, 0x10)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r10 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000860)
r11 = inotify_init()
inotify_add_watch(r11, &(0x7f0000000040)='./file0\x00', 0x0)
r12 = inotify_init()
inotify_add_watch(r12, &(0x7f0000000040)='./file0\x00', 0x0)
r13 = inotify_init()
inotify_add_watch(r13, &(0x7f00000003c0)='\x00', 0x20000844)
r14 = syz_open_dev$char_usb(0xc, 0xb4, 0xf3f)
r15 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @release, @register_looper, @dead_binder_done, @free_buffer], 0x0, 0x8126000, 0x0})
r16 = dup3(r14, r15, 0x180000)
ioctl$TCSETA(r16, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0xffff, 0x4, 0xb, '\"\x00'})
inotify_add_watch(r16, &(0x7f0000000140)='./file1\x00', 0x1def1db4d1c3decb)
r17 = syz_open_dev$char_usb(0xc, 0xb4, 0xf3f)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e5a0440000000000440000000000000050000000840000000000000000000000000000000000000af3a32153a7be408a151fed9ebd138ff554dd9799dc98cb9b87cbcab56926e8cd63dc6208ba73ea6478324aa4af466fd4cdaef0425cefe", @ANYRES64=0x0], 0x0, 0x8126000, 0x0})
dup3(r17, 0xffffffffffffffff, 0x180000)
inotify_init()
inotify_add_watch(r13, &(0x7f0000000000)='./file0\x00', 0x20000860)
r18 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$cgroup_ro(r18, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000860)
fsmount(0xffffffffffffffff, 0x0, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
r19 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_NMI(r19, 0xae9a)

06:44:48 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:48 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:48 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x13000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1848.910724][   T27] kauditd_printk_skb: 9 callbacks suppressed
[ 1848.910743][   T27] audit: type=1800 audit(1580885089.054:4058): pid=23093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17421 res=0
[ 1849.033308][   T27] audit: type=1800 audit(1580885089.154:4059): pid=23099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17426 res=0
06:44:49 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:49 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x6})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:49 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1849.506411][   T27] audit: type=1800 audit(1580885089.654:4060): pid=23110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17352 res=0
06:44:49 executing program 4:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r3 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x800, 0x2)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000380)={0x2, 0x0, [{0x5, 0x1, 0x0, 0x0, @msi={0x7, 0x7, 0xff, 0x3ff}}, {0x5, 0x1, 0x0, 0x0, @sint={0x0, 0x10001}}]})
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x2, 0x5, <r6=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a78, 0x2, [], @string=&(0x7f0000000000)=0x80}})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="faa13ebd7a68b868d23694c7be3e50227c93b50e49781cea3eec9b4a8796946142e826e479ec7a46570a9e102adc5683597a81a18ce55fb68d2e0c2f7aa7d5feb0d293a9e9531bc2ccf479a92be5586c20be9b9b1fef388d8fb69d41db2f6d0ebaa0948244610b", 0x67, <r7=>0x2})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000140)="b011a289b33bd640ba7f6e3a3487c133199f8693f4b983d5ac62c6d0d9c2975064f250f18640817809a13a75046131206274de9e5a8f54f6a1b48f861ff1ffab49cce67e5f559c3cba340f", 0x4b, r7})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000300)={0x5, [0xffff0000, 0x8001], 0x6}, 0x10)
close(r0)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r9 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r10, 0x208200)
sendfile(r0, r9, 0x0, 0x8000fffffffe)

06:44:49 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:49 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x4c0401, 0x0)
ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000280)=0x8001)
fcntl$setstatus(r1, 0x4, 0x2000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, r1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
sched_setparam(r0, &(0x7f0000000440)=0x3)
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x100, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000400)=""/25)
r6 = socket(0xa, 0x1, 0x0)
close(r6)
r7 = socket(0x100000000011, 0x2, 0x0)
bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0}, &(0x7f00000002c0)=0x14)
bind$xdp(r6, &(0x7f0000000040)={0x2c, 0x1, r8}, 0x10)
connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r8}, 0x10)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r10 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000860)
r11 = inotify_init()
inotify_add_watch(r11, &(0x7f0000000040)='./file0\x00', 0x0)
r12 = inotify_init()
inotify_add_watch(r12, &(0x7f0000000040)='./file0\x00', 0x0)
r13 = inotify_init()
inotify_add_watch(r13, &(0x7f00000003c0)='\x00', 0x20000844)
r14 = syz_open_dev$char_usb(0xc, 0xb4, 0xf3f)
r15 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @acquire, @release, @register_looper, @dead_binder_done, @free_buffer], 0x0, 0x8126000, 0x0})
r16 = dup3(r14, r15, 0x180000)
ioctl$TCSETA(r16, 0x5406, &(0x7f00000001c0)={0x200, 0x3090, 0xffff, 0x4, 0xb, '\"\x00'})
inotify_add_watch(r16, &(0x7f0000000140)='./file1\x00', 0x1def1db4d1c3decb)
r17 = syz_open_dev$char_usb(0xc, 0xb4, 0xf3f)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e5a0440000000000440000000000000050000000840000000000000000000000000000000000000af3a32153a7be408a151fed9ebd138ff554dd9799dc98cb9b87cbcab56926e8cd63dc6208ba73ea6478324aa4af466fd4cdaef0425cefe", @ANYRES64=0x0], 0x0, 0x8126000, 0x0})
dup3(r17, 0xffffffffffffffff, 0x180000)
inotify_init()
inotify_add_watch(r13, &(0x7f0000000000)='./file0\x00', 0x20000860)
r18 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$cgroup_ro(r18, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000860)
fsmount(0xffffffffffffffff, 0x0, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
r19 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_NMI(r19, 0xae9a)

[ 1849.672958][   T27] audit: type=1800 audit(1580885089.814:4061): pid=23115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17297 res=0
[ 1849.838149][   T27] audit: type=1800 audit(1580885089.984:4062): pid=23121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17417 res=0
06:44:50 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffff7f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:50 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010000})
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080))
setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000010c0)='attr/current\x00')

[ 1850.389318][   T27] audit: type=1800 audit(1580885090.534:4063): pid=23233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16523 res=0
06:44:50 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:50 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x15000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1850.768150][   T27] audit: type=1800 audit(1580885090.914:4064): pid=23269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17420 res=0
[ 1850.901907][   T27] audit: type=1800 audit(1580885091.014:4065): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17423 res=0
06:44:51 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x7})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:51 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:51 executing program 4:
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x100000003, 0x3a)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x7, 0xffffffff, 0x1})

06:44:51 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:51 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:51 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x78000)
fcntl$setstatus(r0, 0x4, 0x800)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffc2f, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x40c}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x120, 0x0, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
pread64(r1, &(0x7f00000008c0)=""/223, 0xdf, 0x46ab)
exit(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x21aa1e1bad23571b, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000005c0)=0x4, 0x4)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000240)={0x3, "d385d39283e80094e66361a34a5100343aea867e30fd3657f19da0824b4a72bc", 0x3, 0xef5, 0xff, 0xb000, 0x8})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x40, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
fsetxattr$security_evm(r2, &(0x7f0000000500)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="05031400000049720050faddea0b390167101a7eb4fd64199877f91d6f3e5dd45dbf89f0f2163a404d314274943d36e5b5bdf25a42098850690cb674df80ac075aa52b24648334502d433219ff7d6d64e64f17b65807fc71518f"], 0x5a, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000640)=ANY=[], 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000600)={0x0, 0x9}, 0x8)

[ 1851.302170][   T27] audit: type=1800 audit(1580885091.444:4066): pid=23361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17417 res=0
[ 1851.419967][   T27] audit: type=1800 audit(1580885091.484:4067): pid=23364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17421 res=0
[ 1851.587183][T23473] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1851.631071][T23475] xt_l2tp: missing protocol rule (udp|l2tpip)
06:44:51 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x78000)
fcntl$setstatus(r0, 0x4, 0x800)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61124c000000cdf76113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f65000000000000650700000200000007070000ff0000001f75000000000000bf540000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514c6bd2bc8ff57a9478cfba32bc09b632f82180f7259f67ecafd05dd3c98b2d55bb7ac3a066ffe16cd6b017626858c29bff0328d72b9ba7700a73716d27ab0a7a2064c7c42a3f54ec9aaee30e09d908da8764bf61ba6f5b409b527a8a1523cc8979b480a7817b018cb57de40472b06f4e35e6bb14c9b7930885d3323d6637596ba62aba0a423cbfcb9cfd1721e289bd3cfc4ed4ccf71611576985e7c06d286fe67b499d8456e65c754025a3b8cefe09a46f57c4018a0d9f73ff12098944e60348e7dc38752186fd951d6e3ce0295ee288ea5492c1e8cee4702a72cecd1810508b89a6fba905de9e653612289bf1a97f0501c3d932e1d9d37395e47ca39ce48f89c2af17ab1c00b42e5f4a15fbcd546c5f89b07d7ad4a2749bf3af1d598a6226f6e02015a0b28fe93821c2dbef34b093478dc0e3cb0a6eb24d6c2aac5"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffc2f, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x40c}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x120, 0x0, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
pread64(r1, &(0x7f00000008c0)=""/223, 0xdf, 0x46ab)
exit(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x21aa1e1bad23571b, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000005c0)=0x4, 0x4)
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000240)={0x3, "d385d39283e80094e66361a34a5100343aea867e30fd3657f19da0824b4a72bc", 0x3, 0xef5, 0xff, 0xb000, 0x8})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x40, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
fsetxattr$security_evm(r2, &(0x7f0000000500)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="05031400000049720050faddea0b390167101a7eb4fd64199877f91d6f3e5dd45dbf89f0f2163a404d314274943d36e5b5bdf25a42098850690cb674df80ac075aa52b24648334502d433219ff7d6d64e64f17b65807fc71518f"], 0x5a, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000640)=ANY=[], 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000600)={0x0, 0x9}, 0x8)

06:44:52 executing program 4:
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f00000000c0)='\xc1[nodevselinux\x00'}, 0x30)
r2 = dup(0xffffffffffffffff)
ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000000))
r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x123500)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r3, r4)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x30c, [0x9, 0xf1, 0x4, 0x0, 0x5, 0x0, 0x8, 0x40, 0x5, 0x60, 0xd, 0x6, 0x9, 0x0, 0x1000, 0x0, 0x0, 0xab, 0xfc00, 0x0, 0x6, 0x0, 0x27a, 0x4, 0x5, 0x3e, 0xfe15, 0x1ff, 0x6, 0x9, 0x9d00, 0x4, 0xfffe, 0x2, 0x3ff, 0xff, 0x0, 0x62b2, 0x3, 0x3ff, 0x0, 0x7f, 0xcadd, 0x9, 0x81, 0x1ff, 0xe7, 0xfffc], 0x7})
socket$vsock_stream(0x28, 0x1, 0x0)

[ 1851.935023][T23480] xt_l2tp: missing protocol rule (udp|l2tpip)
06:44:52 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:52 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:52 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="04630440000000000e63ec0b63004000000000000000000500000092445a084b7b24222fc4a395b0fa32bab4c4558e36031f80234b181ba826791b7138376576769dddb757609471cf297d06235e746a5dd3f99e159d4e7f5e875982a1ba3bd77774ce580000000000000000e890310ca29022275cc8a1061693ed44056869135043afddc46b63c5e151a3bbe0a3cc6c23159fd5bf318e4e90191c4c642b0610bcdbd9caadeec82a49498469fa850c602e4ce0"], 0x3, 0x20000000, 0x0})
mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80000, 0x0)
linkat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x0)
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r4=>0x0)
shutdown(0xffffffffffffffff, 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000840), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={<r6=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000400)={r6, &(0x7f0000000380)=""/76})
mount$bpf(0x0, 0x0, 0x0, 0x80808, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_lt={'euid<', r4}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@fowner_gt={'fowner>'}}]})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2c)
pipe(0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x1, r11})

06:44:52 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa7d92b0a62}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:52 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x8})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000000800, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)={[{@fat=@debug='debug'}]})
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file1\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
connect$nfc_raw(r3, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3}, 0x10)

[ 1852.321003][T23597] binder: 23551:23597 unknown command 200041230
[ 1852.354821][T23597] binder: 23551:23597 ioctl c0306201 20000080 returned -22
[ 1852.421057][T23597] binder: 23551:23597 unknown command 200041230
[ 1852.497826][T23597] binder: 23551:23597 ioctl c0306201 20000080 returned -22
06:44:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14483f077c56ef260401000012c8a50046b404"], 0x14}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000002c0)='&\x00\xadO\x06\xa3\x85\xb0\x8c\xe1\a\xf6\fZ7\xdc\xf2w\xe4\xbd\xbb\x85\x87t\x82Ikp\x04\xff\v\xac\xd0I\xa3L\xc5\xf3\aw\x8e\'%\xbb\xddU\xbd\x9e\x90D\x10\x00\x00\x00\x00\x00\x00\x02\x00\xc4\xd1\xb41\xe9\\|&#\tl\x04C-\x18\x8f\x0fLh\xdfx\xc3?\xb6\xe1\x18Q%\xbc!\"\xe0\x94\x11zj\x100\x1d\xd7\xe6m\x9c\x9f\xe9\x13(\xe3\x12\xa3d\xe4jPZ.\xf0\x89\x15\xf5\x10\x14\xbb\x1f#\x1ej\'e\xbf5\xa9\xdb\xf8\xef?s\a\xd3FE\xf5f\xf2\xef\x9a3\x92\xac\xcd\x9d\xf7];\xb4Q\xc8#1\xe0\x85\x1b\xbc\xf7_\x05;\x8aJ\x1c\x91k\xe1\x89\x17\xd1\xf1\xe6/\xe0\xb2\xd0j\xba\xb1\xc2\x18\xc2RS\x1f\xb4\xa7W\xe5\x11\x00\xd8\x00x\xd6\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)="72964ad6b71445137a39ad1704a13542629cffff4afe9c58d4cbf746324599bcd913e51dafe63a1784ce3b816141bd9992dfdbd1583bc883b82d9dc2a6c6c10c4a50ef8d41f884d2c58b6b4eeed5e44d334e1f5350ebdd2c9363459ecbb8bd9b611d2d6182e99ed4beec7acd4bd121e7da7b189b558bfcc5f2fa067318b10809c1de2d428148e3f85926bf41fec3a0b644d6e676caee8c4daec5fd86800e0d02a0a2a427ec7463df12a28f58396008a4932946e068414126bbe115eeaa231437c1d8b5d721b38ab9cb629f5a4229574cfd67", 0xd2)

06:44:52 executing program 2:
mkdir(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x7, [], @value=0x7ff}})
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x86a)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91", 0x67)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400081, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4)

06:44:52 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x401f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:52 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:53 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000380)={0x3, "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"})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000140))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xf4, 0xff}]})
fcntl$setstatus(r4, 0x4, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'sit0\x00', 0x200})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x4, 0x0, 0x6})

06:44:53 executing program 2:
mkdir(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x7, [], @value=0x7ff}})
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x86a)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91", 0x67)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400081, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4)

06:44:53 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x6000, 0x0)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000080))
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.controllers\x00', 0x26e1, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x90002)
sendfile(r6, r6, 0x0, 0x8800000)
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffffe1, 0x3, 0x1c, &(0x7f0000ff0000/0x10000)=nil})

06:44:53 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:53 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:53 executing program 2:
setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
fcntl$getown(r1, 0x9)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000300)={0x16})
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24800}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000280)="0c81703ed639aa7b969a47c721e36f834ab4d34cbef08ebc018f2c84cad501429d3631a5a72d87058a35252849448d802cc74c20bbf7f414f4c700175201c6bdd7591a5b83b34bc2c5086910de3d6b2790e163165352ad1c2e359a08c1bd534af55d89e234812e4f0635d3f5756975343d8732a1f0af27ad77866dee4d", &(0x7f0000000080)=""/25}, 0x20)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x9, 0x7, 0x80}, {0xfff, 0xff, 0x0, 0x8c30}]})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x1, 0x101, 0xfffffffb, 0x8, 0x8, "db382547b000"})

06:44:53 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xc})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:53 executing program 4:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}}, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2200)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000001400)={{0x5e, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e21, 0x3, 'rr\x00', 0x30, 0x401}, {@multicast2, 0x4e21, 0x10000, 0x2e0, 0xffff, 0x7}}, 0x44)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
r7 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r7, 0x0)
r8 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r9 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c)
r10 = socket(0xa, 0x4000000001, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001580)={<r11=>0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc)
setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={r11, @loopback, @remote}, 0xc)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000001600)={<r13=>0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78)
ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9})
setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={r13, @remote, @loopback}, 0xc)
ioctl$FICLONE(r7, 0x40049409, r9)
r14 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000480)={'team0\x00', r13})
sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0xbc}}, {{0x8, 0x1, r11}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r15 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r16 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16)
getsockname$packet(r16, &(0x7f00000016c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001700)=0x14)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket$netlink(0x10, 0x3, 0x0)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r22, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r22}}, 0x20}}, 0x0)
r23 = socket$nl_route(0x10, 0x3, 0x0)
r24 = socket$netlink(0x10, 0x3, 0x0)
r25 = socket$netlink(0x10, 0x3, 0x0)
r26 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, <r27=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r27, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r24, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r23, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r27}}, 0x20}}, 0x0)
r28 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r29 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r28, 0x4c00, r29)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r29, 0x8933, &(0x7f0000001dc0)={'batadv0\x00', <r30=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001e00)={'team0\x00', <r31=>0x0})
r32 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r33 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r32, 0x4c00, r33)
accept$packet(r33, &(0x7f0000002040)={0x11, 0x0, <r34=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002080)=0x14)
r35 = socket$nl_route(0x10, 0x3, 0x0)
r36 = socket$netlink(0x10, 0x3, 0x0)
r37 = socket$netlink(0x10, 0x3, 0x0)
r38 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, <r39=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r39, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r36, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000001640)=ANY=[@ANYBLOB="2800000010008de01a90000000000014005f65e2b3a88a000000d4993fb8edd9c9c93f69f063e822c65c531c137f8447", @ANYRES32=r39, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0)
sendmsg$nl_route(r35, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r39}}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000007140)={'vxcan1\x00', <r40=>r39})
getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000007180)={@multicast1, @multicast2, <r41=>0x0}, &(0x7f00000071c0)=0xc)
r42 = socket$nl_route(0x10, 0x3, 0x0)
r43 = socket$netlink(0x10, 0x3, 0x0)
r44 = socket$netlink(0x10, 0x3, 0x0)
r45 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, <r46=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r44, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r46, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r43, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r46, @ANYBLOB="0000000003000000000200008fd87f77c5e3b78340a22678b5be5f9f17aadef194cd2d4627ae8f8ad29ed715dd5b217115ad5a0c62e92c7e0bb500950db09e25082b0d8b0ef6d0597186d2a65b4f1cf0f8ac98477e2e306107925fc218d1014648e9019438033a8dd7fc3434c514f5e86fe81aa5"], 0x28}}, 0x0)
sendmsg$nl_route(r42, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r46}}, 0x20}}, 0x0)
r47 = socket$nl_route(0x10, 0x3, 0x0)
r48 = socket$netlink(0x10, 0x3, 0x0)
r49 = socket$netlink(0x10, 0x3, 0x0)
r50 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r50, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r50, &(0x7f0000000100)={0x11, 0x0, <r51=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r49, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r51, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r48, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r51}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r47, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r51}}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000007200)={'wireguard1\x00', <r52=>0x0})
r53 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r54 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r53, 0x4c00, r54)
ioctl$sock_SIOCDELRT(r54, 0x890c, &(0x7f0000007280)={0x0, @l2={0x1f, 0x7, @none, 0x5, 0x1}, @phonet={0x23, 0x7, 0x2, 0x80}, @can={0x1d, <r55=>0x0}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f0000007240)='bond_slave_0\x00', 0x60, 0x6, 0x8d6})
r56 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r57 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r56, 0x4c00, r57)
r58 = socket$nl_route(0x10, 0x3, 0x0)
r59 = socket$netlink(0x10, 0x3, 0x0)
r60 = socket$netlink(0x10, 0x3, 0x0)
r61 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r61, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r61, &(0x7f0000000100)={0x11, 0x0, <r62=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r60, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r62, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r59, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r62}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r58, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r62}}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r57, 0x8933, &(0x7f0000007300)={'team0\x00', <r63=>r62})
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000077c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007780)={&(0x7f0000007340)={0x41c, r14, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r17}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r27}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r30}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x958}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r34}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r41}}}]}}, {{0x8, 0x1, r46}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r51}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r55}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r63}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x2, 0x3, 0x1, 0x9bf}, {0x956e, 0x9, 0x9e, 0x4}, {0x6, 0x7f, 0x5, 0x5}, {0xfff7, 0x1, 0x80, 0x1}]}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r64 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x5}, 0x8)
write$cgroup_pid(r64, &(0x7f0000000300), 0x12)
migrate_pages(0x0, 0x10000, 0x0, 0x0)
r65 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
preadv(r65, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
socket(0xa, 0x3, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20)
gettid()
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

06:44:53 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4d010000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1853.797923][T23754] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
06:44:54 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x2000)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f0000002800)="aa31c32afa7fd302069f2f4d0736d54c615de73e7f8a21f99f7718fc18223fd85cde63b4f9b9e72579a99db933481fe20908c4fc647e26f16a985e221243871a73f124a07ce9951ff9606f9740201326684d0b6c4717532a829773d49a8dc900618e91b8dcf563e05de58ec2adbdce28abd1d921276da00b618a2941a685040d00a27f36eb074345246c316570e0b32809e249de4394ae5013f750c3c4410b6ca2484cc70236962e2a54b4b7b6bc9bb45b3a77402729ac812b48d7e01da7986db93892a1c781ad", 0xc7}, {&(0x7f0000000340)="9265b76b50df46d70b629e15551a15a1f2fb50f27fa2cccfea9186e873bf7af90cc9015b2ee9a356b3105237d5a9f9a49ac705d5a6078a57511956b3b8217b5acb90cf1cd43172606c5e1b10e9e02c9d0fed6d281ee447f85e33dcf5e74242287c98f45a6d0700000036323d31ea50ef620c187adf1c63544d5eb15edac3731b48643710644dd46a03d3f1c3cc436bb7df48d9b010591a3eb2fd331bc43de649f2a831e2e2b3e42d2e84fb17d9c35b818c1ba2b90b2c7ed4c1d1d976779bfc022c82166d40c6d566b93b15327d69e15d0a54c338968ff80de248f14347433872c44525f5cd30", 0xe6}, {&(0x7f0000000300)="246b3ea3e45f7e8caa2c85cdfa4afc91f2f24b85753a0421f8e98a7eecc312b280c7e5c156", 0x25}, {&(0x7f0000001800)="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", 0xe58}], 0x4)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000100)={0x1f}, 0x1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x7fffffff)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8)
r6 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r7)
chown(&(0x7f0000000180)='./file1\x00', r6, r7)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x10, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x7fff}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x40}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x3f}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xfffffffffffffff8}}], [{@audit='audit'}, {@uid_lt={'uid<', r5}}, {@audit='audit'}, {@fowner_gt={'fowner>', r6}}, {@dont_measure='dont_measure'}, {@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'wlan1cgroupmime_type'}}]})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10001})

06:44:54 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1854.033489][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1854.039308][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:44:54 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1854.074781][   T27] kauditd_printk_skb: 10 callbacks suppressed
[ 1854.074799][   T27] audit: type=1800 audit(1580885094.224:4078): pid=23868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17346 res=0
[ 1854.204517][   T27] audit: type=1800 audit(1580885094.354:4079): pid=23871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17416 res=0
06:44:54 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1})
write(0xffffffffffffffff, &(0x7f0000000540)="fc00000048000703ab092500090017000aab07ff020003400000920821000100df0100000005d0000000020009039815fa2c1ec2865eaaa79bb94b59fe140000bc00020000036c6c256f1a05002e117c22eb5d8b12170000006000c821b4a62b004740bf0478aa2a7c8b911e400000002fcb5d7bd5afaa8934d02dfaa46e73e788b98e20d7d5bbc91a16d0a3f23e2e80772c05defd5a32e24b3a83ab1afad6082038f4f8adb03ef3d92c83170e5bba4a463ae4f5566f44660da80b76b6825bbd5b95dbcc037816460e63d9b9af626944bf15b2ccd243f295ed94e0ad91bd0734babc7c3f2e87abd43cd16f17e583df150c3b880f411f46a6b567b832", 0xfc)

06:44:54 executing program 2:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='virtiofs\x00', 0x0, 0x0)
r2 = shmget(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2)
shmctl$SHM_UNLOCK(r2, 0xc)

06:44:54 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x88000, 0x0)
syz_open_pts(r2, 0x33dc80)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff01080000ffffffffffffffe2000001e0006bf000000000800000000000000000000000000000000a00002e00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000008ecfb13516ef73ddd94bfeadbfce0d4ed6f71b242b42000000ea000000000000000000000000000000001f000500000000000000000000000000000000000000e6010000000100000000002000"], 0xb8}}, 0x0)
sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)="b34fdf28f8310c976da539c0b9135cd98f4230921165f803ed958b24a98ede43f317a3813b384778556ad5d83bc733a3dcc8a1957d5a1326ebbf04ef2754194dd6b1f0cf6509de5c9d2de47619e3dad821571a347d2c34d20504d2553ad6405f3f00ac99366251a611b52afde91894808c3fd165871b17d9e76e3a91627db6b1afb29a231dd908a12211d706e7697c7fab3e4bcabe588e43", 0x98}, {&(0x7f00000002c0)="741413ec41804c813e3d65f5231c41f71b77fa1577e99ad90049a3b49e07e32d95cf677b1d6f0f527f1c557641998a81accdf84f26ae6d7f5f588a7914e5214a659268f3f2fdbee068e02fb3a20cdf8a66446671477858b70fc661b9d1029a3d14add14857aa2517c96f", 0x6a}, {0x0}], 0x3, &(0x7f0000000100)}], 0x1, 0x0)

06:44:54 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x200000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1854.498714][T23980] virtio-fs: tag <(null)> not found
06:44:54 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x10})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:54 executing program 2:
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0185879, &(0x7f0000000080))
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000003c0)="f15a1893a0a85027308f6eefb779a265357578db234253e056d83e5c5075bd456575e318bdf36763a709d1a82e2c61b2488c18d20c870099cec352f80c000100a4057e85b5bfd7fd00980aba771d7b7420db71e5542311bf7be6a14100000000000000", 0x0}, 0xfffffffffffffd8d)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xb)
r3 = socket$kcm(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cgroup.controllers\x00', 0x2761, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040), 0xab)
sendmsg(r3, 0x0, 0x20000000)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r3, r4})
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008740)={0x0, 0x0, &(0x7f0000008700)=[{&(0x7f0000001980)=""/63, 0x3f}, {&(0x7f0000007680)=""/4096, 0x1000}, {0x0}], 0x3}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef7)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000240))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)

[ 1854.588378][T23983] virtio-fs: tag <(null)> not found
[ 1854.608125][T23984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
06:44:54 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:54 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:54 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'veth1_to_bond\x00', 0x2000})

[ 1854.795299][   T27] audit: type=1800 audit(1580885094.944:4080): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16486 res=0
[ 1854.902038][   T27] audit: type=1800 audit(1580885095.004:4081): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17297 res=0
06:44:55 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1854.993972][   T27] audit: type=1800 audit(1580885095.144:4082): pid=24107 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17448 res=0
06:44:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00-\x00'}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x167, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300)="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", 0x218, 0x8000, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
close(r5)

[ 1855.153446][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1855.159260][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1855.187647][   T27] audit: type=1800 audit(1580885095.334:4083): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17432 res=0
06:44:55 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4003)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x17)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f00000007c0)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500)={0x0, <r6=>0x0}, &(0x7f0000000540)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4000)
r8 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r9)
chown(&(0x7f0000000180)='./file1\x00', r8, r9)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
r12 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r13 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r13)
statx(r13, &(0x7f0000000640)='./file0\x00', 0x5fff, 0xa0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r16)
chown(&(0x7f0000000180)='./file1\x00', r15, r16)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000780)=<r17=>0x0)
setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="df52217099b500daab43912e9f05888f95ca00000000afc382d0051883f32244a5c025b3597f264be2c912b93c79cb2584", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r14, @ANYBLOB="02000000f8c89f707105fc22da94412f243ef2a4e3942ef5747664949ffa03241cf2860246ca47901b6069dc20e5ecfbe3640044bafcf7dea55cc6a72c5fb57d5b12f1e7fc93080179afb25561db57db1726b1102445671a2200c1c78714104759", @ANYRES32=r15, @ANYBLOB="02000700", @ANYRES32=r17, @ANYBLOB="040001000000000010000500000000002000030000000000"], 0x54, 0x2)
accept4(r0, &(0x7f0000000100)=@pptp, &(0x7f0000000000)=0x80, 0x800)
r18 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x0)
execve(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000880)='/dev/uinput\x00\x82\xf9E\x89\x17\xcd\xa9\x9b\xb3\xe3\x1e\xb1\xbb<z\x95\x06\x90\xf3\a\x10\xf1\xcb>\xd1\x16e\xd7\xc5\xcd\xb5\xec\xa5\xbe\xcd\xd7if\xf3\x96\x8f<\xa0%\xb6\x03fm?\\\x19\xa2\xab\f\x82\x18\x13\xf54c)\xd5PB\xc8\xa66\xe2\xc7\x18\xe0L\x18^A\x8a\x9d\x1f:\xcd\xb3-\xf4j\xfa\xb1\x1et\xd2\xdbU\a\a\x17\x97.\xaf\xa1*\xf6\x9cuV\x868-\xd9\x03\xc4\x8b\xf3\xa0*wJyP\x9b\x9a\xc9\n\xce\x822\xe2l\x0eX\xe9\xcd#\xf5\x83\x97\xe3T\xf3\xd7\x8e\xb8\x826\xa3\x14\x8f\xc9\xe6_ (\xc6\xb7\xd0\x186J\xb8\xa9\x9e\x96\x85\xb2\xd4\xbdd\xedj\xb1/\xf6)<WH\xcf\v^\xfe\xf38\xb5\x86u\x99\x11\xb8\xae\x18=\xec\x1c\xafI\xc1\xce0\xb1\xa1\xc0\xc4@d\f\xe2Oz6\x89\xc8\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000200)='/dev/ui\xff\x01\x00\x00\x00\x82\xf9E\x89\x17\xcd\xa9\x9b\xb3\xe3\x1e\xb1\xbb<z\x95\x06\x90\xf3\a\x10\xf1\xcb>\xd1\x16e\xd7\xc5\xcd\xb5\xec\xa5\xbe\xcd\xd7if\xf3\x96\x8f<\xa0%\xb6\x03fm?\\\x19\xa2\xab\f\x82\x18\x13\xf54c)\xd5PB\xc8\xa66\xe2\xc7\x18\xe0\b\x18^A\x8a\x9d\x1f:\xcd\xb3-\xf4j\xfa\xb1\x1et\xd2\xdbU\a\a\x17\x97.\xaf\xa1*\xf6\x9cuV\x868-\xd9\x03\xc4\x8b\xf3\xa0*wJyP\x9b\x9a\xc9\n\xce\x822\xe2l\x0eX\xe9\xcd#\xf5\x83\x97\xe3T\xf3\xd7\x8e\xb8\x826\xa3\x14\x8f\xc9\xe6_ (\xc6\xb7\xd0\x186J\xb8\xa9\x9e\x96\x85\xb2\xd4\xbdd\xedj\xb1/\xf6)<WH\xcf\v^\xfe\xf38\xb5\x86u\x99\x11\xb8\xae\x18=\xec\x1c\xafI\xc1\xce0\xb1\xa1\xc0\xc4@d\f\xe2Oz6\x89\xc8\x00'], &(0x7f0000000380)=[&(0x7f00000003c0)='\\dev/uinput\x02\x82\xf9E\x89\x17\xcd\xa9\x9b\xb3\xe3\x1e\xb1\xbb<z\x95\x06\x90\xf3\a\x10\xf1\xcb>\xd1\x16e\xd7\xc5\xcd\xb5\xec\xa5\xbe\xcd\xd7if\xf3\x96\x8f<\xa0%\xb6\x03fm?\\\x19\xa2\xab\f\x82\x18\x13\xf54c)\xd5PB\xc8\xa66\xe2\xc7\x9e2\xd6N\xaa\xaa\xfe\x7f\x18\xe0L\x18^A\x8a\x9d\x1f:\xcd\xb3-\xf4j\xfa\xb1\x1et\xd2\xdbU\a\a\x17\x97.\xaf\xa1*\xf6\x9cuV\x868-\xd9\x03\xc4\x8b\xf3\xa0*wJyP\x9b\x9a\xc9\n\xce\x822\xe2l\x0eX\xe9\xcd#\xf5\x83\x97\xe3T\xf3\xd7\x8e\xb8\x826\xa3\x14\x8f\xc9\xe6_ (\xc6\xb7\xd0\x186J\xb8\xa9\x9e\x96\x85\xb2\xd4\xbdd\xedj\xb1/\xf6)<WH\xcf\v^\xfe\xf38\xb5\x86u\x99\x11\xb8\xae\x18=\xec\x1c\xafI\xc1\xce0\xb1\xa1\xc0\xc4@d\f\xe2Oz6\x89\xc8'])

06:44:55 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x5, 0x2})
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000040)=0xb700)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes, 0x10ff00})
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x17, 0x0, 0x183, &(0x7f0000000240)})

06:44:55 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7c150000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:55 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x80fe)
openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x92004, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x80}, 0xe)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000180)={0x8001})

[ 1855.492921][   T27] audit: type=1800 audit(1580885095.634:4084): pid=24226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17424 res=0
06:44:55 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1855.805092][   T27] audit: type=1800 audit(1580885095.954:4085): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17241 res=0
06:44:56 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x12})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:56 executing program 4:
geteuid()
setreuid(0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000600)={{0x0, 0x4, 0x0, 0x100, 'syz0\x00'}, 0x0, 0x0, 0x7c, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000280)=['(\x00', '/dev/qat_adf_ctl\x00'], 0x13, [], [0x46, 0x7f, 0x9]})
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
clock_getres(0x5, &(0x7f0000000440))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
setuid(r4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="dd04001300000000000100050000000000000002000020000004010000000000000000b49f1cf4ce3aef2355b0806cbdf4c5bf40596937a77fe52d4061b8fa206f7385e135e3148cfda57c4a61cf56fed6d5dd30f2312d3040b81d5db563712f6941254c42e854936bf6da4d83a19afc3ccfc76dfa696f7e6f9b664133f5fce5ca95ef0001000013b489dbd82e64540309cf2a93b1699b09d7931a12b3ba1ea14c"], 0x28)
sendmmsg(r5, &(0x7f00000092c0), 0x400000000000064, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="dd04001300000000000100050000000000000002000020000004010000000000000000b49f1cf4ce3aef2355b0806cbdf4c5bf40596937a77fe52d4061b8fa206f7385e135e3148cfda57c4a61cf56fed6d5dd30f2312d3040b81d5db563712f6941254c42e854936bf6da4d83a19afc3ccfc76dfa696f7e6f9b664133f5fce5ca95ef0001000013b489dbd82e64540309cf2a"], 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)

06:44:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(r3, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10)
fcntl$setstatus(r4, 0x4, 0x42000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext, 0x12ce9, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

06:44:56 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:56 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1855.962192][   T27] audit: type=1800 audit(1580885096.104:4086): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17454 res=0
[ 1856.087607][   T27] audit: type=1800 audit(1580885096.234:4087): pid=24353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17460 res=0
06:44:56 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb000200}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:56 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9a020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:56 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x3000, 0x4000, 0xffff, 0x1, 0x8000})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.controllers\x00', 0x26e1, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x90002)
sendfile(r5, r5, 0x0, 0x8800000)

06:44:56 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000830000001ae3f426554954abceb806109cb1f70315ab690dc788b1b1367c1aadd994c8ffdf83de137cf54c0705194ed23184a9315238273fe362584d33389c9370bf5b1657888191797a4781f28f4ed7561c5d8df5721f0f934da69bce8c06e4abeede14e6bfb5c3054f7603503510219a07a49a0948c6187e6983"], 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0xfffc, 0x80, 0x7, 0x40}, {0x101, 0x7, 0x6, 0x8}, {0x2, 0x80, 0x5}, {0x80, 0x0, 0x1, 0x3}, {0x0, 0x77, 0x1, 0x8001}, {0x3, 0x3f, 0x4, 0xffffff26}]})
move_pages(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f00000001c0)=[0x0, 0x81], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0)

06:44:57 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xe0})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:57 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:57 executing program 2:
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='gfs2meta\x00', 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000bc0), 0x24, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000200)={0x43d3fb86, 0x8000, 0xffff7fff, 0xffffffc1})
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40, 0x0)
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x3, &(0x7f0000000380)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000280)="05460bd73e2c805f642ef4f22fad233642b90c2b2fda0c377d09da72b31f0842696113636e8eff55fb5ee7262650a5bb5e5165d60273d2cf096d86d53991dd1fab3f55f2bf05344c217af94326b4e0b4ab05f1663843bf50e704f65a35a336a1d97bebab1d131ff30ef31d09926c5524e5a3d85fb0301a56cab873e00b9f09de6667102c2e85e0b1b8866c43353819de784a4b80ac164acf5d9033bfec50cf54f20214fcda2da2cfb29a272d680c6f65c7cbc443dfd868a77eb490978143ef12f2bee9eb56e7b1e33a7d9f2b68b92acf65e8052b6c7e84dd1c9e18296b6e84ce4503150528df3bb972", 0xe9, 0x5ff}, {&(0x7f0000000180)="223de96e0a8d9ea664ca5a19713af8c5da281851de83b5bf4496b486ea3ca91a44acaa83e816403496f2de220f7ba99bc8368b7ac45dff4625e4ee3c54e02065197a8b6792da0354c00e3451f0", 0x4d, 0x5}], 0x20120a0, &(0x7f0000000400)={[{@codepage={'codepage', 0x3d, 'cp857'}}, {@type={'type', 0x3d, "8dd815b8"}}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\''}}, {@smackfsdef={'smackfsdef', 0x3d, '#eth1/*'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}]})
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000080)={0x101, 0x1ae316a3})

06:44:57 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:57 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:57 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
set_robust_list(&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0xc77, &(0x7f0000000100)}, 0x18)
r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x6, 0xa00)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000200))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000240)='#eth1em1wlan1trusted\x00')
uselib(&(0x7f0000000280)='./file0\x00')
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="2e0000002e00815be00f80ecdb4cb904074865160800030014001c00000004140e000a001500cd5edc2976d153b4", 0x2e}], 0x1, 0x0, 0x0, 0xe00}, 0x0)

06:44:57 executing program 2:
set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
keyctl$chown(0x12, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08e542454bff03000000c9e083a101e820e32ccdd488abbc09e6a9b0175bee25e810cc958851d475bfceb084a818ba1112aada56c2052e149cc08e", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25070000000500130016000000050007000200000006001c00ffff000008000a000200000006001b004e230000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004040)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
creat(0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0x0)

06:44:57 executing program 4:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x200000001a, &(0x7f0000222000)=0x9, 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffd, 0x1e1c80)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f00000002c0))
r4 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r5)
chown(&(0x7f0000000180)='./file1\x00', r4, r5)
r6 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r7)
chown(&(0x7f0000000180)='./file1\x00', r6, r7)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x40440, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0xc5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12)
r13 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r14 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14)
r15 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r16 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16)
getpid()
r17 = getpid()
sched_setscheduler(r17, 0x5, &(0x7f00000002c0))
sched_setscheduler(r17, 0x3, &(0x7f0000000880))
r18 = getpid()
sched_setscheduler(r18, 0x5, &(0x7f00000002c0))
clone3(&(0x7f0000000700)={0x50000280, &(0x7f00000004c0), &(0x7f0000000500)=<r19=>0x0, &(0x7f0000000540), {0x1c}, &(0x7f0000000580)=""/234, 0xea, &(0x7f0000000680)=""/3, &(0x7f00000006c0)=[0x0, r18], 0x2}, 0x50)
r20 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r21)
chown(&(0x7f0000000180)='./file1\x00', r20, r21)
r22 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r23=>0x0}, &(0x7f0000000080)=0xc)
setregid(0x0, r23)
chown(&(0x7f0000000180)='./file1\x00', r22, r23)
sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)="2a9ebbbd09a91cd868accde4062d9f4a94d568b3a1eeca45ece5dd156d10b4f3a69a4c28c55495ae9023a4f3e3e82db10505a8c09087a9ddf0d2c633c343a65751d240cf8005a57b79f2e16b211aa7a1b6f2b1f719e928fd75d9b7d48ecd44a35237474117d8678c857a5a977969d4d87448e2384f465204a55e9390c459abac566b9401f73be776ee366e7bcc7dae9d71ca4810e86c", 0x96}, {&(0x7f0000000380)="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", 0xfb}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB="0000000014000000200000000100000001000000", @ANYRES32=r13, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0xc841}, 0x4050814)
r24 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r24)
shutdown(r0, 0x0)
r25 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8180, 0x0)
sendmmsg$inet6(r25, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="e118f3bb779bc5b01ce4df04741daec4d778075a9a0e345ec3e7fbf13fd280baec4453850acfe1f8c5109b277e9be62987cb2802faba076548131151fc2965d7f61564083e63da9b5d8aee8b4a3aa5fd27ebe74a6b47e4242eb7c360000000000000", 0x62}], 0x1}}], 0x1, 0x48810)

06:44:57 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x700000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1857.832875][T24505] overlayfs: filesystem on './file0' not supported as upperdir
06:44:58 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xc8}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x0, "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"})
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="22619191a5b05893055a05eba4d360f0250bffc98a3f2bd3551cbae69b585ba3ed76341d81c60e1b011f429c474610", 0x2f}, {&(0x7f0000000500)="ada5c98e17cbcb6d40a7854352cb5eae0730e1a7b6dffba2c791ebdf411680291338703fe69abe5be4c1c86ff04251c34ffecab913c03bb0c89bfea1d2ca8893005809b25336554122a2925243e24d1102b430e0f886a01b", 0x58}, {&(0x7f0000000580)="b80bfc209c2b781550cbb66a51fa194c0f9d936b77ba3d7e4d9741144067568973782668f03073a5f36a3dfd9526dd68df24486a8bfa52b2e5d65ca391660cf24f3b5756e453d7bacce091ffcdffe87b47222414dfc497ad464a357e88b936583326f0b44df4c22be97dca2ffeed42b5f0533655c2beec0a0a74c97b8815be8e86dd370401a37b3f97047f050e7a21f95b161170e7142e793f0a0711a33524a409def4f3cf29f8ece6dfc1afa41f97e347", 0xb1}], 0x3)

06:44:58 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x300})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:58 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/4096)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000100)=0x3, 0x4)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="0126df"], 0x1}}, 0x0)
r5 = socket$inet6(0x10, 0x2, 0x14)
sendto$inet6(r5, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0xff, 0x1, 0x2, 0x4, 0x800}, 0x14)

06:44:58 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x6, 0xff, 0x0, 0x0, 0x0, 0x9, 0xc000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x5a15, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
bind$inet(r2, &(0x7f0000000a40)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r3 = dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000090000000500000000040000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="914c5e12b0aa12dc00000000000000"], @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="576f00f74e3f9c00000000000000370006000000000000000b000000000000002b001761000000000100000000000000b80f66ce0b254c49b3ef55718b4a48275ecf9d1ac57747040c3ac632120bc9d4e2854017b4b8422085959ecbec1717daf4befccc034f8e71c58dbdf31b5d0e1196cd52f0df5e9abb4f82c3d93fd58c8d73d91e3a40ec143a358e5718c6ced44e8d049d737b8699e9ee232005f88dd6b60d28c12e6344a1f134f1f01908a32613bd2264ec3e96e16d9ca1279f823a55aacd8e841818357bb3c4f9d6cf5786915e0e0f872e521eb7f364c6c71965aa93d6d8bf065b41d73656314fc98bd51cef5279e900000000000000"], 0x58}, 0x0)
ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000004c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5)
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
read$alg(r10, &(0x7f0000000240)=""/24, 0x18)

06:44:58 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:58 executing program 2:
set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

06:44:58 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xe4020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:58 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x80)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x8e00, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x28841, 0x0)

[ 1858.737668][T24546] atomic_op 00000000e109b96a conn xmit_atomic 0000000026354f04
06:44:59 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:59 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x500})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:44:59 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:59 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfeffffff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:44:59 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1859.555260][   T27] kauditd_printk_skb: 13 callbacks suppressed
[ 1859.555278][   T27] audit: type=1800 audit(1580885099.704:4101): pid=24568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16626 res=0
[ 1859.609013][   T27] audit: type=1800 audit(1580885099.754:4102): pid=24570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16691 res=0
06:44:59 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x2, 0x3, 0xbf)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10)
io_setup(0x5, &(0x7f0000000140))
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0xc785, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x0, 0x0)
io_submit(r5, 0x2, &(0x7f0000000240)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0])
io_submit(r5, 0x1f, &(0x7f0000000080))

[ 1859.747059][   T27] audit: type=1800 audit(1580885099.894:4103): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0
06:45:00 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x600})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

06:45:00 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:00 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffff7f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1860.595537][   T27] audit: type=1800 audit(1580885100.734:4104): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16626 res=0
06:45:00 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x11000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1860.738647][   T27] audit: type=1800 audit(1580885100.884:4105): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16691 res=0
[ 1860.859362][   T27] audit: type=1800 audit(1580885101.004:4106): pid=24796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16945 res=0
06:45:01 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x13000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:01 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={<r2=>0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r3)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80000, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x40, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12)
r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x151000, 0x0)
ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r12)
r14 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r15 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r14, 0x4c00, r15)
r16 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r17 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17)
r18 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r19 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19)
r20 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r21 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r20, 0x4c00, r21)
r22 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r23 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r22, 0x4c00, r23)
r24 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r25 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25)
mount$overlay(0x0, 0x0, 0x0, 0x840824, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES32], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYPTR, @ANYRES32=r8, @ANYPTR, @ANYRESOCT=0x0], @ANYRES64=r15, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYPTR, @ANYPTR, @ANYRESOCT], @ANYBLOB="e74d97601e350d1eb0e8d64bc46f3a5498d3c39e7fb893fa14ffb79092780635475ed9ad6f56220cd0110c327bcbd4dfe0da6b5d28c183561fdde67254d5840bdd0f87c33bccb81fae3e31a39a979c9727fdcf4bff2f4cdcc4a30437976b2e8fda0e8db60dc432df0d6cc3871c09fb30308b4e46b259de4647b94e60c7d5d834c610e5268736c0304169c67e59aa2bf7c974ba61cafba65a55cbb97d566d220bbdc8590fa037ced84690001e99e546478506732222a3a8c1cb8e53670a00af6786c1383fa9e84bc5beeb8b72f604f908fc64bb4634bfcc38d0c5", @ANYRES64=r16, @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="5c0118aa619bb1c20635943d3de551e83f9bdb103180fd5f8ea69777d9fdaf0410d417e3fe2e65f7c967262d86be98ebf62433d37c5bbcb473c5", @ANYRESOCT=r19, @ANYRESDEC=r21, @ANYPTR, @ANYRESOCT=0x0, @ANYPTR], @ANYRESHEX=r22], @ANYRESDEC, @ANYRES16=r25])
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r26 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
r27 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r28 = ioctl$KVM_CREATE_VCPU(r27, 0xae41, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4004005)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000a80)={0x0, "a6cddeb02f407e24b899d9619a4e0a53e1c62827604c39fdaa27e21bee8a0ddd", 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4})
r29 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x80, 0x0)
socket$inet6(0xa, 0xa, 0x3)
r30 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00')
sendmsg$NBD_CMD_RECONFIGURE(r30, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000a9e18f97d863df79d93a925c728c51d78c86693ed1c0854082bf3257b7aed8aa52754c5325ba2994545a20226a4cda51209d6d69c5115a9ad7f0e70de0ae318406214ef2f349a7639fcc6923d9e970fd6196b6777029de338e05a46f3e3cbb2bb932faa20e4d9452084418e7bf131fd6"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf25020000000c000400fcffffffdfffffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10)
fcntl$dupfd(r28, 0x605, 0xffffffffffffffff)
r31 = socket$packet(0x11, 0x3, 0x300)
r32 = dup(r31)
setsockopt$packet_int(r32, 0x107, 0x10000000000f, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {0x0, 0x1}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x400, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
r33 = ioctl$KVM_CREATE_VCPU(r26, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r33, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

[ 1861.184143][   T27] audit: type=1800 audit(1580885101.334:4107): pid=24803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16945 res=0
06:45:01 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x700})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:01 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb00020000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:01 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1861.637857][   T27] audit: type=1800 audit(1580885101.784:4108): pid=24918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16626 res=0
06:45:01 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x14000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1861.817488][   T27] audit: type=1800 audit(1580885101.964:4109): pid=24923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16691 res=0
[ 1861.928543][   T27] audit: type=1800 audit(1580885102.074:4110): pid=24925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17041 res=0
06:45:02 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xac4dab762b}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:02 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7ff)
ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x9ed, 0x8, 0x0, 0x103, 0x409c}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
getpid()
clock_adjtime(0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e1, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x0, 0x0, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
dup3(r2, r3, 0x80000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
fchdir(r4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000240), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000001400080002000000000008000400ffffffff0c000300000001a7a31b0000000000080001000000000000", @ANYRES32=0x0, @ANYBLOB="c13ca1086efa6dd9ce213aea0bd86bfdd0"], 0x48}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r8, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000000000008000500ac141400080002000000000008000400fffff0ff0c000300000000000000000006000600000000000c0003000100000000000000"], 0xfffffffffffffcdb}}, 0x0)
dup(r9)
dup(0xffffffffffffffff)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00')
socket$inet6(0xa, 0x1, 0x0)

06:45:02 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x15000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1862.282890][T24932] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1862.317897][T24932] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
06:45:02 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00')
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000100)=0x6891)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x10000, 0x20c081)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00')
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x20048000)

06:45:02 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:02 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xc00})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:02 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:03 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:03 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:03 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:03 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x40000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:04 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1200})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:04 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:04 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:04 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x401f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1864.728269][   T27] kauditd_printk_skb: 10 callbacks suppressed
[ 1864.728289][   T27] audit: type=1800 audit(1580885104.874:4121): pid=25183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17201 res=0
06:45:05 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket(0x2000000011, 0x2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f0000000240)=""/249, 0xf9}], 0x2)
unshare(0x100)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000003c0)={0xe90000, 0x8000, 0xb7a4, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x98091b, 0xce, [], @value=0x401}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000500))
r8 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={<r9=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r8, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, [], 0x30}, 0x5}, r9}}, 0x38)
r10 = fcntl$dupfd(r1, 0x406, r0)
connect$x25(r10, &(0x7f0000000540)={0x9, @null='               \x00'}, 0x12)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000400), 0x4, r9, 0x1c, 0x1, @ib={0x1b, 0x1f, 0xff, {"cb4d6180d963b8ce75fe8fbe630ef6fb"}, 0x100000001, 0x9, 0x4}}}, 0xa0)
syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0x3666}, &(0x7f0000000200), 0x0)

06:45:05 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8)
r0 = getpid()
r1 = getpid()
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x90800, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0xffffffffffffffda, 0x2, {{0x7fff, 0x4a3, 0x2, r0}}}, 0x28)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000100))
waitid(0x1, r0, &(0x7f00000002c0), 0x4000000e, &(0x7f00000008c0))

[ 1865.279607][   T27] audit: type=1800 audit(1580885105.424:4122): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16581 res=0
06:45:05 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:05 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4d010000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1865.629289][   T27] audit: type=1800 audit(1580885105.774:4123): pid=25305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17155 res=0
06:45:05 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x2000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:05 executing program 4:
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25bca274769e020a2734fa00a2e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a782d2702e6d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000))
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}})
acct(&(0x7f0000000180)='./file0\x00')

[ 1865.809028][   T27] audit: type=1800 audit(1580885105.954:4124): pid=25310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17157 res=0
06:45:06 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:06 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1866.000455][   T27] audit: type=1800 audit(1580885106.144:4125): pid=25399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17345 res=0
06:45:06 executing program 4:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$netlink(0x10, 0x3, 0x0)
clock_adjtime(0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x4)
clock_gettime(0x0, &(0x7f0000000240))
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x3da, 0x0)

[ 1866.162378][T25425] IPVS: ftp: loaded support on port[0] = 21
[ 1866.187031][   T27] audit: type=1800 audit(1580885106.334:4126): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17313 res=0
06:45:06 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280))
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x60, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48}, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000200)={&(0x7f0000000100)=[0x200, 0x7], 0x2, 0x6, 0x8, 0x7f, 0x4, 0x5, 0x0, {0x40, 0x6, 0x3f, 0x2, 0x57, 0x20, 0xffff, 0x0, 0x9, 0x9, 0x7ff, 0x2, 0x1ff, 0x0, "cf1cf1d841876f2b5e07c307bb3adc4f22719d50d28b86e0caa9dbbf3ab46ebb"}})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00')
fcntl$getown(r1, 0x9)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000880)={0x2, @capture={0x1000, 0x1, {0x8, 0xfffffffe}, 0x1ff, 0x100}})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0)

06:45:06 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1866.516580][   T27] audit: type=1800 audit(1580885106.664:4127): pid=25533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17137 res=0
[ 1866.565435][T29582] tipc: TX() has been purged, node left!
[ 1866.622533][T25535] rdma_op 00000000662b5376 conn xmit_rdma 0000000026354f04
06:45:06 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7c150000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1866.683198][   T27] audit: type=1800 audit(1580885106.824:4128): pid=25539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17362 res=0
[ 1866.877362][   T27] audit: type=1800 audit(1580885107.024:4129): pid=25644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17377 res=0
06:45:07 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9a020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:07 executing program 4:
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040))
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000300)='lo!bdeveth0^mime_type\x00'}, 0x30)
keyctl$chown(0x12, 0x0, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video2\x00', 0x2, 0x0)
keyctl$reject(0x13, 0x0, 0x200, 0x100, r2)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
setregid(0x0, 0x0)

06:45:07 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x3f00})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1867.267379][   T27] audit: type=1800 audit(1580885107.414:4130): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17377 res=0
06:45:07 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:07 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1867.681429][T25654] overlayfs: conflicting lowerdir path
06:45:08 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00f0000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:08 executing program 4:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xffff, 0xa, 0x4, 0x20000000, 0x3, {}, {0x2, 0xa, 0x20, 0x7, 0x3, 0x20, "bc0e2015"}, 0x3, 0x1, @planes=&(0x7f0000000000)={0x9, 0x200, @mem_offset=0x9, 0x1}, 0x6e, 0x0, <r3=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000180)={0x70, 0x3, 0x1})
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0xc0d58860b4c77e40, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}}}, 0x3c}}, 0x0)
sync()

06:45:08 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:08 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x600000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:08 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xe3020000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:08 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xe0ff})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:09 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x700000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:09 executing program 4:
setrlimit(0x7, &(0x7f0000000000))
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x2})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x242500, 0x0)
getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r6=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={r6}, 0x8)
r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000200)={<r9=>0x0, 0x6}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={r6, 0x1ff, 0x9, 0x4, 0x3, 0x1f, 0x81, 0x100, {r9, @in6={{0xa, 0x4e24, 0x80000001, @ipv4={[], [], @loopback}, 0x7}}, 0x880f, 0x80000000, 0xff, 0x4c, 0x5}}, &(0x7f0000000340)=0xb0)
r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})

06:45:09 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a3a4)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x114, 0x31, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x566560ef}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb20}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1e}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000040)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="a47fc48b9b3275dc3fc163856befb496b147fe2164ecf71321f551a31f9a32d8aef83093a0aa544789fdd82297efc812f95f62")
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

06:45:09 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:09 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:09 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfeffffff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1869.755513][   T27] kauditd_printk_skb: 8 callbacks suppressed
[ 1869.755534][   T27] audit: type=1800 audit(1580885109.904:4139): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16518 res=0
06:45:10 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000061129400000000009500000000009579"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)

[ 1869.846050][   T27] audit: type=1800 audit(1580885109.994:4140): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16658 res=0
06:45:10 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffff7f}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:10 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xff00})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061116c00"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x113040, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
set_thread_area(&(0x7f0000000180)={0x0, 0x1000, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1})
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)={0x40000000})
nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000001200))

[ 1870.168893][   T27] audit: type=1800 audit(1580885110.314:4141): pid=26122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16498 res=0
06:45:10 executing program 4:
mlockall(0x1)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000005640))
lstat(0x0, &(0x7f0000000840))
r4 = socket(0x11, 0x0, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002700)=0x14)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x20}}], 0x2, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002700)=0x14)
socket(0x11, 0x800000003, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000005a40)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005a00)={&(0x7f0000005680)=ANY=[@ANYBLOB="98060000", @ANYRES16=0x0, @ANYBLOB="00002abd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="840102804c000100240001006c625f74785f6d6574686f640000fb28c6db0000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000004000010024000100", @ANYRES32=r7, @ANYBLOB="080007000000000078000100240001006e6f746966795f70656572735f636f756e7400"/47, @ANYBLOB="f0", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0xc}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
syncfs(0xffffffffffffffff)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6}, 0x10)
syncfs(0xffffffffffffffff)
accept(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x0, @multicast1}})
syz_open_dev$vcsa(0x0, 0x1, 0x102)
syncfs(0xffffffffffffffff)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x1)

06:45:10 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x401f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:10 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:10 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1870.710719][   T27] audit: type=1800 audit(1580885110.854:4142): pid=26144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16498 res=0
[ 1870.761822][   T27] audit: type=1800 audit(1580885110.904:4143): pid=26143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16546 res=0
[ 1870.849007][   T27] audit: type=1800 audit(1580885110.994:4144): pid=26146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16642 res=0
06:45:11 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xac251f8878}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1871.130664][   T27] audit: type=1800 audit(1580885111.274:4145): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16642 res=0
06:45:11 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xff01})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:11 executing program 4:
socket$packet(0x11, 0x2, 0x300)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101200, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lremovexattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='sec\x00\x00\x00\x00\x00\x00\x00\x00it'])
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x8000000200000400, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4)

06:45:11 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:11 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:11 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4d01000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1871.720315][   T27] audit: type=1800 audit(1580885111.864:4146): pid=26321 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16544 res=0
[ 1871.783480][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1871.789289][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1871.820578][   T27] audit: type=1800 audit(1580885111.944:4147): pid=26375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16626 res=0
06:45:12 executing program 4:
creat(0x0, 0x0)
open(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f400110a002b2c25e994efd18498d66205baa68754a3000000000200000000000000000800ffffff8400000000000000c001", 0x32}], 0x1}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, 0x0}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)

[ 1871.896049][   T27] audit: type=1800 audit(1580885111.964:4148): pid=26376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16642 res=0
06:45:12 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x620a2bd9a7000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:12 executing program 4:
open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x128)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, 0x20, 0x2})
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lookup_dcookie(0xc8f, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000005c0))
rt_tgsigqueueinfo(0x0, 0x0, 0x80000014, 0x0)
ptrace$getsig(0x4209, 0x0, 0x75fffc, 0x0)

06:45:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x4000000)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x309000, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20})
r3 = getpid()
sched_setscheduler(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000480))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c)
r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x5, &(0x7f0000000380))
r9 = dup2(0xffffffffffffffff, r7)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r9, 0xc1105518, &(0x7f0000000740)={{0x10, 0x4, 0x0, 0x100, 'syz0\x00', 0x6}, 0x1, 0x0, 0x7c, r8, 0x2, 0x3f, 'syz1\x00', &(0x7f0000000280)=['(\x00', '/dev/qat_adf_ctl\x00'], 0x13, [], [0x0, 0x7f, 0x9, 0x3ff]})
timer_create(0x0, &(0x7f0000000300)={0x0, 0x2e, 0x2}, &(0x7f0000000340))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback, 0x68000000}}, 0xffffff8d, 0x0, 0x0, 0x0, 0x30d}, 0x9c)
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f00000001c0)=""/13, 0x5})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

06:45:12 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:12 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xff0f})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:12 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:12 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000002c0)=0x6, 0x4)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0xe26e, 0x8, 0x1})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r3, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffecd)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0)
write$P9_RWALK(r4, &(0x7f0000000300)=ANY=[], 0x6)
r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r4, r5)
r6 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100000000, 0x301000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003340)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000001a80)=0x1a2)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
close(r7)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
getpid()
write$cgroup_pid(r8, &(0x7f00000036c0), 0x12)
r9 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000016c0)={{{@in=@initdev, @in6=@local}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8)
getresgid(&(0x7f0000000340), &(0x7f0000000280), &(0x7f0000001880))

06:45:13 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:13 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7c15000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:13 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00020000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:14 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:14 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xffe0})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:14 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:14 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240))
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x8000000000001, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a0000009500000000000000e535f8a62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa732300000637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x8000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000440)="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", 0x1000, <r8=>0x1})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000080)={r8, 0x91, &(0x7f0000001440)=""/145})
sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef)

06:45:14 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb4bb67f693f4dea0}, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xffffffff, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)

06:45:14 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1874.503694][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1874.509894][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:45:14 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x2, 0x10000, 0x2, 0x3}}, 0x2e)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r8=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0)

06:45:14 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:14 executing program 2:
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66000000001d2fb88bb295d3c7fa643d", @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400))
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
faccessat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x110, 0x100)
r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
write$binfmt_elf32(r6, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3e, 0x4000, 0x340, 0x38, 0x2b8, 0x9, 0x5, 0x20, 0x1, 0x7, 0x837, 0x3ff}, [{0x4, 0x100, 0x2, 0x3, 0x3, 0x2, 0xfffffff9, 0x3}], "916b7ea5476338c9b155195009bb0c53e6a83f14edf8e6", [[], [], []]}, 0x36f)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8)
r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r10, 0xc0405519, &(0x7f0000000140)={0x3, 0x0, 0x2, 0x6, '\x00', 0x1})
mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)='9p\x00', 0x880020, &(0x7f0000000840)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532322c72713d3078303030303030303030303030303031662c74696d656f75743d3078303030303030303030303030303030322c657569643c5b7f39bfc8571203d9985b523d23025b350af34c333a9843dbd3b208370776b28619442f7f2417109c77139a479fad774aa90d2e738b338d1130e2fe27c90dc56125c9448e233ec50a140b13284114b6ca64bf1bd1d029393040cd", @ANYRESDEC, @ANYBLOB=',obj_role=:}}-!{securitywlan0,rootcontext=unconfined_u,euid>', @ANYRESDEC=r8, @ANYBLOB=',fscontext=root,smackfstransmute={,fsmagic=0x0000000000000400,smackfsdef=autofs\x00,audit,\x00'])
r11 = getpgid(0xffffffffffffffff)
sched_getaffinity(r11, 0x8, &(0x7f0000000100))
r12 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x64d1, 0x0)
fdatasync(r12)
bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0x0, 0x4}, 0x6)
r13 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r14 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x3a, 0xdb48}, &(0x7f0000000340)=0x90)

[ 1874.786277][   T27] kauditd_printk_skb: 10 callbacks suppressed
[ 1874.786294][   T27] audit: type=1800 audit(1580885114.934:4159): pid=26963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16593 res=0
[ 1874.819276][T26965] autofs4:pid:26965:autofs_fill_super: called with bogus options
[ 1874.827289][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1874.827334][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:45:15 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9a02000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:15 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x29acf})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1875.090386][   T27] audit: type=1800 audit(1580885115.234:4160): pid=26973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16834 res=0
[ 1875.126501][T26965] autofs4:pid:26965:autofs_fill_super: called with bogus options
06:45:15 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(r0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4480, 0x0)
connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e)

[ 1875.223462][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1875.230089][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:45:15 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:15 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d68, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x8001}, 0xd8)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
socket$inet(0x2, 0xffffffffffffffff, 0xff)
socket$inet_udplite(0x2, 0x2, 0x88)
chroot(0x0)
ioctl(0xffffffffffffffff, 0xb3, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
listxattr(0x0, 0x0, 0x0)
r3 = dup(r2)
lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
r7 = accept(r6, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000706010200000094000000000c0000093a1d40ce22ba3fdab523da74ccd6258d463c90070000000800064000000000000000ff73797a32000000000900020063797a3000c86d438acff8d68c157e16108c86d472000000050001000700000005000120d7ed1b2d2c8cbb1c6bd2ef34d5b1421616c3ef842d218dc70d71fe745e1acd267ec0bcbb9df703ab3f58446de03d4770a8d0cbf9921d111569ed1b184cd6ca7df801ab6233b15cda752638fa3cd2fc289515c902a7c6800f18ed4bf197f11c84100000000000000000"], 0x4c}}, 0x40000)
ftruncate(r4, 0x2007fff)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

06:45:15 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)

[ 1875.412099][   T27] audit: type=1800 audit(1580885115.554:4161): pid=26986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16532 res=0
06:45:15 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00f000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:15 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:15 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)

[ 1875.814011][   T27] audit: type=1800 audit(1580885115.964:4162): pid=27101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16581 res=0
06:45:16 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd102000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1875.893616][   T27] audit: type=1800 audit(1580885115.964:4163): pid=27102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16817 res=0
06:45:16 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x500000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:16 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x325080, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f00000002c0))
getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd5d, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000004)
write$input_event(r3, &(0x7f0000000040)={{0x0, 0x2710}, 0x1f, 0x9, 0x3}, 0x18)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
r15 = dup2(r0, r0)
preadv(r15, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0)
sendfile(r0, r2, 0x0, 0x102002700)

[ 1876.066654][   T27] audit: type=1800 audit(1580885116.214:4164): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16544 res=0
06:45:16 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)

[ 1876.122816][T27216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1876.177788][   T27] audit: type=1800 audit(1580885116.324:4165): pid=27220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16574 res=0
[ 1876.210791][T27216] batman_adv: batadv0: Adding interface: veth7
[ 1876.240010][T27216] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1876.283477][T27216] batman_adv: batadv0: Not using interface veth7 (retrying later): interface not active
[ 1876.300281][T27224] batman_adv: batadv0: Removing interface: veth7
06:45:16 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x100000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

06:45:16 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

06:45:16 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4)

[ 1876.417440][   T27] audit: type=1800 audit(1580885116.564:4166): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16581 res=0
06:45:16 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1876.545665][T27216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
06:45:16 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x600000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1876.621383][   T27] audit: type=1800 audit(1580885116.764:4167): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16642 res=0
06:45:16 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280))

06:45:17 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x325080, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f00000002c0))
getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd5d, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000004)
write$input_event(r3, &(0x7f0000000040)={{0x0, 0x2710}, 0x1f, 0x9, 0x3}, 0x18)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
r15 = dup2(r0, r0)
preadv(r15, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0)
sendfile(r0, r2, 0x0, 0x102002700)

[ 1876.794125][   T27] audit: type=1800 audit(1580885116.944:4168): pid=27444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16510 res=0
06:45:17 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

[ 1877.138946][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
06:45:17 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1877.245105][T27550] batman_adv: batadv0: Adding interface: veth9
[ 1877.251476][T27550] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
06:45:17 executing program 4:
dup(0xffffffffffffffff)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r2, r3)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/null\x00', 0x14000, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000b40)=@assoc_value={<r7=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="00000004"], 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f0000000040)='syz0\x00')
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e01, @empty}}, 0x0, 0xf850}, &(0x7f0000000000)=0x90)
dup3(r4, r5, 0x0)
write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[], 0x0)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420200, 0x0)
ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000180)={0x0, @capture={0x0, 0x0, {0x7, 0x8}, 0x3}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x800, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
dup2(r12, r10)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)

[ 1877.385470][T27550] batman_adv: batadv0: Not using interface veth9 (retrying later): interface not active
06:45:17 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1877.444913][T27662] batman_adv: batadv0: Removing interface: veth9
06:45:17 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffdbc4c3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x800000})
chmod(&(0x7f0000000080)='./bus\x00', 0x0)

[ 1877.598235][T27665] ==================================================================
[ 1877.606364][T27665] BUG: KCSAN: data-race in __synchronize_hardirq / handle_irq_event
[ 1877.614338][T27665] 
[ 1877.616750][T27665] write to 0xffff88812bc93600 of 4 bytes by interrupt on cpu 1:
[ 1877.624395][T27665]  handle_irq_event+0xaf/0xca
[ 1877.629084][T27665]  handle_edge_irq+0x1a4/0x4a0
[ 1877.633862][T27665]  do_IRQ+0x7c/0x130
[ 1877.637759][T27665]  ret_from_intr+0x0/0x21
[ 1877.642126][T27665]  kcsan_setup_watchpoint+0x1d4/0x460
06:45:17 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x700000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1877.647574][T27665]  __tsan_read1+0xc2/0x100
[ 1877.652004][T27665]  tomoyo_domain_quota_is_ok+0x10b/0x2b0
[ 1877.657663][T27665]  tomoyo_supervisor+0x22b/0xd20
[ 1877.662631][T27665]  tomoyo_path_permission+0x121/0x160
[ 1877.668020][T27665]  tomoyo_path_perm+0x2c6/0x390
[ 1877.672884][T27665]  tomoyo_path_symlink+0x69/0xa0
[ 1877.677829][T27665]  security_path_symlink+0xab/0xe0
[ 1877.683063][T27665]  do_symlinkat+0xcd/0x1e0
[ 1877.687487][T27665]  __x64_sys_symlink+0x3f/0x50
[ 1877.692264][T27665]  do_syscall_64+0xcc/0x3a0
[ 1877.696780][T27665]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1877.702665][T27665] 
[ 1877.705132][T27665] read to 0xffff88812bc93600 of 4 bytes by task 27665 on cpu 0:
[ 1877.712885][T27665]  __synchronize_hardirq+0x61/0x1e0
[ 1877.718094][T27665]  synchronize_irq+0x56/0x120
[ 1877.722775][T27665]  serial8250_do_shutdown+0xc1/0x400
[ 1877.728154][T27665]  serial8250_shutdown+0x52/0x70
[ 1877.733104][T27665]  uart_port_shutdown+0x71/0xa0
[ 1877.737972][T27665]  uart_tty_port_shutdown+0x7f/0x170
[ 1877.743270][T27665]  tty_port_shutdown+0x14e/0x170
[ 1877.748213][T27665]  tty_port_close+0x80/0xf0
[ 1877.752831][T27665]  uart_close+0x5d/0x120
[ 1877.757141][T27665]  tty_release+0x285/0x910
[ 1877.761569][T27665]  __fput+0x1e1/0x520
[ 1877.765554][T27665]  ____fput+0x1f/0x30
[ 1877.769535][T27665]  task_work_run+0xf6/0x130
[ 1877.774046][T27665]  exit_to_usermode_loop+0x2b4/0x2c0
[ 1877.779479][T27665]  do_syscall_64+0x384/0x3a0
[ 1877.784084][T27665]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1877.789969][T27665] 
[ 1877.792297][T27665] Reported by Kernel Concurrency Sanitizer on:
[ 1877.798457][T27665] CPU: 0 PID: 27665 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1877.807133][T27665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1877.817192][T27665] ==================================================================
[ 1877.825260][T27665] Kernel panic - not syncing: panic_on_warn set ...
[ 1877.831870][T27665] CPU: 0 PID: 27665 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 1877.840543][T27665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1877.850593][T27665] Call Trace:
[ 1877.853927][T27665]  dump_stack+0x11d/0x181
[ 1877.858278][T27665]  panic+0x210/0x640
[ 1877.862193][T27665]  ? vprintk_func+0x8d/0x140
[ 1877.866806][T27665]  kcsan_report.cold+0xc/0xd
[ 1877.871441][T27665]  kcsan_setup_watchpoint+0x3fe/0x460
[ 1877.876833][T27665]  __tsan_read4+0xc6/0x100
[ 1877.881265][T27665]  __synchronize_hardirq+0x61/0x1e0
[ 1877.886506][T27665]  ? radix_tree_lookup+0x33/0x40
[ 1877.891463][T27665]  synchronize_irq+0x56/0x120
[ 1877.896159][T27665]  ? preempt_count_add+0x6f/0xb0
[ 1877.901120][T27665]  serial8250_do_shutdown+0xc1/0x400
[ 1877.906444][T27665]  serial8250_shutdown+0x52/0x70
[ 1877.911397][T27665]  uart_port_shutdown+0x71/0xa0
[ 1877.916262][T27665]  uart_tty_port_shutdown+0x7f/0x170
[ 1877.921561][T27665]  ? uart_port_shutdown+0xa0/0xa0
[ 1877.926596][T27665]  ? uart_insert_char+0x3c0/0x3c0
[ 1877.931636][T27665]  tty_port_shutdown+0x14e/0x170
[ 1877.936594][T27665]  tty_port_close+0x80/0xf0
[ 1877.941107][T27665]  ? uart_proc_show+0xf60/0xf60
06:45:18 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffff7f00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[ 1877.946103][T27665]  uart_close+0x5d/0x120
[ 1877.950363][T27665]  tty_release+0x285/0x910
[ 1877.954794][T27665]  ? ima_file_free+0x92/0x290
[ 1877.959486][T27665]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 1877.965391][T27665]  __fput+0x1e1/0x520
[ 1877.969381][T27665]  ? do_tty_hangup+0x30/0x30
[ 1877.973987][T27665]  ____fput+0x1f/0x30
[ 1877.977982][T27665]  task_work_run+0xf6/0x130
[ 1877.982549][T27665]  exit_to_usermode_loop+0x2b4/0x2c0
[ 1877.987851][T27665]  do_syscall_64+0x384/0x3a0
[ 1877.992470][T27665]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1877.998367][T27665] RIP: 0033:0x45b399
[ 1878.002274][T27665] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1878.021901][T27665] RSP: 002b:00007f35514fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 1878.030500][T27665] RAX: 0000000000000006 RBX: 00007f35514fe6d4 RCX: 000000000045b399
[ 1878.038481][T27665] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[ 1878.046465][T27665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1878.054545][T27665] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1878.062531][T27665] R13: 0000000000000098 R14: 00000000004c1e2a R15: 000000000075bf2c
[ 1878.072248][T27665] Kernel Offset: disabled
[ 1878.076575][T27665] Rebooting in 86400 seconds..