00000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:39 executing program 5:
unshare(0x8000400)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8})

00:01:39 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000440)=""/4096)

00:01:39 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:40 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x4000000000080002, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x0, 0xfffffffffffffff8})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x5865]}}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x3f}, 0x8)
fdatasync(r0)

00:01:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0))
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
r1 = gettid()
ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680))
tkill(r1, 0x15)

00:01:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:40 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x4000000000080002, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x0, 0xfffffffffffffff8})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x5865]}}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x3f}, 0x8)
fdatasync(r0)

00:01:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = memfd_create(&(0x7f0000000080)='}^userselinux\x00', 0x3)
accept$alg(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000140)='(\x00', 0x2)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67)
socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r4, r5, &(0x7f0000000000), 0xffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000240)={0x7fffffff})
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x404, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
fcntl$addseals(r5, 0x409, 0x8)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="0e", 0x1}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006666e279639a91d00017d04a00b32fadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5000000000000"], 0x1}}, 0x0)

00:01:41 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e)

00:01:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)

00:01:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:41 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x4000000000080002, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x0, 0xfffffffffffffff8})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x5865]}}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x3f}, 0x8)
fdatasync(r0)

00:01:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:41 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x9, 0xbb, &(0x7f0000000540)=""/187}, 0x48)

00:01:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)

00:01:41 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x9, 0xbb, &(0x7f0000000540)=""/187}, 0x48)

00:01:41 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x4000000000080002, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000280)=0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x0, 0xfffffffffffffff8})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x5865]}}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x3f}, 0x8)
fdatasync(r0)

00:01:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)

00:01:41 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x9, 0xbb, &(0x7f0000000540)=""/187}, 0x48)

00:01:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:41 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)

00:01:41 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x9, 0xbb, &(0x7f0000000540)=""/187}, 0x48)

00:01:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:42 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:42 executing program 4:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0xd3})

00:01:42 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2202, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x6, &(0x7f0000001700)}, &(0x7f0000001780), &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000005c0)})

00:01:42 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

00:01:42 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2202, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x6, &(0x7f0000001700)}, &(0x7f0000001780), &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000005c0)})

[  520.075127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'.
00:01:42 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

00:01:42 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0)

[  520.120766] overlayfs: filesystem on './file0' not supported as upperdir
00:01:42 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2202, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x6, &(0x7f0000001700)}, &(0x7f0000001780), &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000005c0)})

00:01:42 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)

[  520.226530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'.
00:01:42 executing program 4:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0xd3})

00:01:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)

00:01:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x0, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59")
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x0, @multicast2}})
r4 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg(r4, &(0x7f0000006180)=[{{&(0x7f0000000a40)=@in={0x2, 0x4e24, @rand_addr=0x2}, 0x80, &(0x7f0000000b40)}}], 0x1, 0x0)
request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/snd/seq\x00', 0x0)

00:01:43 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

00:01:43 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0)

00:01:43 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2202, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x6, &(0x7f0000001700)}, &(0x7f0000001780), &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000005c0)})

00:01:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)

00:01:43 executing program 4:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0xd3})

[  520.676406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'.
00:01:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000fc0)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/178, 0xb2}], 0x3, &(0x7f0000000f40)=""/85, 0x55}, 0x0)

00:01:43 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)

00:01:43 executing program 4:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0xd3})

00:01:43 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0)

00:01:43 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

00:01:43 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1, 0x4}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48)

[  520.973273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'.
00:01:44 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1, 0x4}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48)

00:01:44 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$EVIOCGREP(r1, 0x40047440, &(0x7f0000d1df52)=""/174)

00:01:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:44 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffb)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0)

00:01:44 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:44 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1, 0x4}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48)

00:01:44 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@generic="641fa86742"]}, 0x1c}}, 0x0)

00:01:44 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$EVIOCGREP(r1, 0x40047440, &(0x7f0000d1df52)=""/174)

00:01:44 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1, 0x4}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48)

00:01:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000fc0)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/178, 0xb2}], 0x3, &(0x7f0000000f40)=""/85, 0x55}, 0x0)

00:01:44 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:44 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@generic="641fa86742"]}, 0x1c}}, 0x0)

00:01:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:44 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:44 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$EVIOCGREP(r1, 0x40047440, &(0x7f0000d1df52)=""/174)

00:01:44 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@generic="641fa86742"]}, 0x1c}}, 0x0)

00:01:44 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, {}, [@generic="641fa86742"]}, 0x1c}}, 0x0)

00:01:44 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$EVIOCGREP(r1, 0x40047440, &(0x7f0000d1df52)=""/174)

00:01:44 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:44 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000fc0)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/178, 0xb2}], 0x3, &(0x7f0000000f40)=""/85, 0x55}, 0x0)

00:01:45 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

00:01:45 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:45 executing program 1:
syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000001800), 0x0, &(0x7f0000001940)={[{@sb={'sb'}, 0x22}]})

00:01:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000fc0)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/178, 0xb2}], 0x3, &(0x7f0000000f40)=""/85, 0x55}, 0x0)

00:01:46 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))

00:01:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0)

[  523.515371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
00:01:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))

00:01:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0)

00:01:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0x1f3, &(0x7f0000015ff0)={&(0x7f0000000040)={0x2c, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32}]}, 0x2c}}, 0x0)

00:01:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0x4, 'queue1\x00'})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:01:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

[  523.765448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'.
[  523.828533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
00:01:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0x1f3, &(0x7f0000015ff0)={&(0x7f0000000040)={0x2c, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32}]}, 0x2c}}, 0x0)

00:01:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0)

00:01:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))

[  524.025521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'.
[  524.046915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'.
00:01:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0)

00:01:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))

00:01:47 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x11, 0x8009, 0x4000008003)
fallocate(r0, 0x11, 0x0, 0x1000)

00:01:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0x1f3, &(0x7f0000015ff0)={&(0x7f0000000040)={0x2c, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32}]}, 0x2c}}, 0x0)

00:01:47 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r2)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18)

[  524.432564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'.
00:01:47 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r2)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18)

00:01:47 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14)

00:01:47 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0x1f3, &(0x7f0000015ff0)={&(0x7f0000000040)={0x2c, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32}, @typed={0xc, 0x14, @u32}]}, 0x2c}}, 0x0)

00:01:47 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x11, 0x8009, 0x4000008003)
fallocate(r0, 0x11, 0x0, 0x1000)

[  524.791378] IPVS: ftp: loaded support on port[0] = 21
00:01:47 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r2)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18)

00:01:47 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14)

00:01:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:47 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r2)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18)

00:01:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14)

00:01:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14}, 0x14)

00:01:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

[  526.221461] IPVS: ftp: loaded support on port[0] = 21
00:01:49 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:49 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x11, 0x8009, 0x4000008003)
fallocate(r0, 0x11, 0x0, 0x1000)

00:01:49 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

00:01:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

[  526.817278] IPVS: ftp: loaded support on port[0] = 21
00:01:49 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

00:01:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:49 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

00:01:50 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r0, 0x11, 0x8009, 0x4000008003)
fallocate(r0, 0x11, 0x0, 0x1000)

00:01:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:50 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

00:01:50 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

[  528.276854] IPVS: ftp: loaded support on port[0] = 21
00:01:51 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000200)=[{}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10)
getgroups(0x0, &(0x7f0000000040))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0), 0x4)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140))
fchown(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local}}, {{@in6=@mcast1}}}, &(0x7f0000000400)=0xe8)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240))
socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080))
r2 = accept$alg(r1, 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x7fffffff)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

00:01:51 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:51 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x20001000009, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c)

00:01:51 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

[  529.009034] IPVS: ftp: loaded support on port[0] = 21
[  529.032805] IPVS: ftp: loaded support on port[0] = 21
00:01:52 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x800000000000004)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xb0}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18)

00:01:52 executing program 3:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:52 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

[  530.414715] IPVS: ftp: loaded support on port[0] = 21
00:01:53 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

00:01:53 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

[  530.649104] IPVS: ftp: loaded support on port[0] = 21
00:01:54 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

[  531.577801] IPVS: ftp: loaded support on port[0] = 21
00:01:54 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:54 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

[  532.011931] IPVS: ftp: loaded support on port[0] = 21
00:01:55 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

00:01:55 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x20001000009, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c)

00:01:55 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

00:01:55 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000036c46f0100380000004a42d6a74bd560f471df53ea658a80c30735000000000060a105dc8eb30b5db1383112a6fd52b161666953a36b0b1922f8402ea0c9deac6dc8cb158b351b3b000000000000000000000000000000000000000000b7ca958db0be808999d4d5b6ab85b6bb67db493a62f01049d0005753d1f9904e6bf06c074e5d93ec8c3dfc2a8851e162e8ce9ccdb30863d06801ffe0e181dd9603716e36792c90ab7a701f41d260bd448701d0cd35ccf00692d657680f18e0c854ca98d2a022f90feac642e02d6a10288bf79274cc769b9c"], 0xd9)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, &(0x7f0000000040)=0x605000, 0x10000000000443)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r2, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30}, 0x30)

00:01:55 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
setsockopt(r1, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0)

00:01:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
setsockopt(r1, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0)

00:01:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
setsockopt(r1, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0)

00:01:56 executing program 0:
syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x329f, 0xfff}, &(0x7f0000001980)=0x10)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  534.132600] binder: 21917:21922 ioctl 2270 200001c0 returned -22
00:01:57 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
unshare(0x40000000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x5)
sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0))
munlockall()

00:01:57 executing program 1:
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00006a0000/0x4000)=nil, 0x4000}, 0x1})

00:01:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
setsockopt(r1, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0)

00:01:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:57 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x20001000009, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c)

[  534.528235] IPVS: ftp: loaded support on port[0] = 21
00:01:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:57 executing program 1:
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00006a0000/0x4000)=nil, 0x4000}, 0x1})

00:01:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

[  534.922869] binder: 21917:21950 ioctl 2270 200001c0 returned -22
00:01:57 executing program 1:
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00006a0000/0x4000)=nil, 0x4000}, 0x1})

00:01:57 executing program 0:
syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x329f, 0xfff}, &(0x7f0000001980)=0x10)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

00:01:57 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:57 executing program 1:
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00006a0000/0x4000)=nil, 0x4000}, 0x1})

[  535.352615] binder: 21960:21966 ioctl 2270 200001c0 returned -22
00:01:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000a80)=0x2a59714fc68b2ce4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r2 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000940)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil})
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x10002, &(0x7f00000006c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000d80))

00:01:58 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x20001000009, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c)

00:01:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:58 executing program 4:
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/213)

00:01:58 executing program 0:
syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x329f, 0xfff}, &(0x7f0000001980)=0x10)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

00:01:58 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000007040))
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000002c0)=0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10)
recvmmsg(r1, &(0x7f000000cd80), 0x0, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380})
lremovexattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=@known='security.capability\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5248010}, 0xc, &(0x7f0000006f40)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x0, 0x70bd28, 0x0, {0x1c, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600))
recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000002c00)=""/51, 0x33}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002f40)=""/164, 0xa4}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f00000042c0)=""/17, 0x11, 0xfffffffffffffc00}}, {{&(0x7f00000057c0)=@alg, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/142, 0x8e, 0x2}}], 0x2, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18)

00:01:58 executing program 4:
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/213)

[  536.205367] device nr0
 entered promiscuous mode
[  536.234139] binder: 21988:21995 ioctl 2270 200001c0 returned -22
00:01:59 executing program 4:
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/213)

00:01:59 executing program 4:
munmap(&(0x7f0000002000/0x3000)=nil, 0x3000)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/213)

00:01:59 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
fcntl$setlease(r0, 0x400, 0x2)

00:01:59 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80)

[  536.810863] audit: type=1804 audit(1540339319.453:171): pid=22013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/185/file0" dev="sda1" ino=16918 res=1
[  536.826137] Process accounting resumed
00:01:59 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
fcntl$setlease(r0, 0x400, 0x2)

[  536.881253] Process accounting resumed
[  536.886222] audit: type=1804 audit(1540339319.453:172): pid=22012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/185/file0" dev="sda1" ino=16918 res=1
[  536.964856] audit: type=1804 audit(1540339319.463:173): pid=22013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/185/file0" dev="sda1" ino=16918 res=1
00:01:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000a80)=0x2a59714fc68b2ce4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r2 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000940)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil})
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x10002, &(0x7f00000006c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000d80))

00:01:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

00:01:59 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80)

[  537.108280] audit: type=1804 audit(1540339319.743:174): pid=22023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/186/file0" dev="sda1" ino=16916 res=1
00:01:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}]}, 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  537.167111] Invalid argument reading file caps for ./file0
[  537.192101] Invalid argument reading file caps for ./file0
00:01:59 executing program 0:
syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280))
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x329f, 0xfff}, &(0x7f0000001980)=0x10)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

00:01:59 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80)

[  537.202444] audit: type=1800 audit(1540339319.783:175): pid=22027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16921 res=0
[  537.252950] audit: type=1800 audit(1540339319.823:176): pid=22032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16921 res=0
00:01:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

00:01:59 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
fcntl$setlease(r0, 0x400, 0x2)

00:01:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}]}, 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  537.294543] Process accounting resumed
[  537.332000] device nr0
 entered promiscuous mode
[  537.352663] binder: 22039:22048 ioctl 2270 200001c0 returned -22
00:02:00 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80)

[  537.392340] audit: type=1800 audit(1540339320.033:177): pid=22054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16932 res=0
[  537.419248] Invalid argument reading file caps for ./file0
00:02:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}]}, 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:00 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

[  537.523335] audit: type=1804 audit(1540339320.163:178): pid=22058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/187/file0" dev="sda1" ino=16933 res=1
[  537.611326] Process accounting resumed
[  537.655037] audit: type=1800 audit(1540339320.293:179): pid=22068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16924 res=0
[  537.678906] Invalid argument reading file caps for ./file0
00:02:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000a80)=0x2a59714fc68b2ce4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r2 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000940)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil})
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x10002, &(0x7f00000006c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000d80))

00:02:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040))
prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d0588c6d81e7d0819afb26acf3f03107f2ac6fb20a95", 0x16}], 0x1, &(0x7f0000000400)}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={<r3=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x5}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e22, 0x36c95371, @local}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x6}, @in6={0xa, 0x0, 0x2, @remote, 0x2b6}]}, &(0x7f0000000180)=0x10)
io_setup(0x80000007ff, &(0x7f00000006c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x301208, 0x3, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}])

00:02:00 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
fcntl$setlease(r0, 0x400, 0x2)

00:02:00 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4)
sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0)

00:02:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000005300)=ANY=[]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}]}, 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:00 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

[  538.012419] audit: type=1800 audit(1540339320.653:180): pid=22084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16931 res=0
[  538.036052] Invalid argument reading file caps for ./file0
[  538.073599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:02:00 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0)

00:02:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040))
prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d0588c6d81e7d0819afb26acf3f03107f2ac6fb20a95", 0x16}], 0x1, &(0x7f0000000400)}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={<r3=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x5}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e22, 0x36c95371, @local}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x6}, @in6={0xa, 0x0, 0x2, @remote, 0x2b6}]}, &(0x7f0000000180)=0x10)
io_setup(0x80000007ff, &(0x7f00000006c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x301208, 0x3, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}])

[  538.242488] Process accounting resumed
00:02:00 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4)
sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0)

[  538.263299] netlink: 'syz-executor5': attribute type 1 has an invalid length.
00:02:01 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setgid(0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xfea9, 0xfa00, {&(0x7f0000000100)}}, 0x14)

[  538.356641] device nr0
 entered promiscuous mode
[  538.376482] IPVS: persistence engine module ip_vs_pe_dip not found
[  538.395638] netlink: 'syz-executor5': attribute type 1 has an invalid length.
[  538.422274] ucma_write: process 791 (syz-executor4) changed security contexts after opening file descriptor, this is not allowed.
[  538.441348] IPVS: persistence engine module ip_vs_pe_dip not found
00:02:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0)

[  538.494046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  538.584440] netlink: 'syz-executor5': attribute type 1 has an invalid length.
[  538.633683] IPVS: persistence engine module ip_vs_pe_dip not found
[  538.799166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:01 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setgid(0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xfea9, 0xfa00, {&(0x7f0000000100)}}, 0x14)

00:02:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40), &(0x7f0000000a80)=0x2a59714fc68b2ce4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r2 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000940)={&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil})
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x10002, &(0x7f00000006c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}})
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000d80))

00:02:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040))
prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d0588c6d81e7d0819afb26acf3f03107f2ac6fb20a95", 0x16}], 0x1, &(0x7f0000000400)}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={<r3=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x5}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e22, 0x36c95371, @local}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x6}, @in6={0xa, 0x0, 0x2, @remote, 0x2b6}]}, &(0x7f0000000180)=0x10)
io_setup(0x80000007ff, &(0x7f00000006c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x301208, 0x3, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}])

00:02:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0)

00:02:01 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4)
sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0)

00:02:01 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setgid(0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xfea9, 0xfa00, {&(0x7f0000000100)}}, 0x14)

[  539.068509] netlink: 'syz-executor5': attribute type 1 has an invalid length.
[  539.154931] IPVS: persistence engine module ip_vs_pe_dip not found
00:02:01 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:01 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f00004fd000), 0x4)
sendmmsg(r1, &(0x7f0000000200)=[{{&(0x7f00000004c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)}}], 0x1, 0x0)

00:02:01 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
setgid(0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xfea9, 0xfa00, {&(0x7f0000000100)}}, 0x14)

00:02:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'dip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0)

00:02:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040))
prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="d0588c6d81e7d0819afb26acf3f03107f2ac6fb20a95", 0x16}], 0x1, &(0x7f0000000400)}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={<r3=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x5}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e22, 0x36c95371, @local}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x6}, @in6={0xa, 0x0, 0x2, @remote, 0x2b6}]}, &(0x7f0000000180)=0x10)
io_setup(0x80000007ff, &(0x7f00000006c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x301208, 0x3, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}])

[  539.331890] device nr0
 entered promiscuous mode
00:02:02 executing program 4:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

[  539.389084] netlink: 'syz-executor5': attribute type 1 has an invalid length.
[  539.473696] IPVS: persistence engine module ip_vs_pe_dip not found
00:02:02 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

[  539.807317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.909719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.916413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x11, 0x3}, {}], 0x30)

00:02:02 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r2 = getpgrp(0x0)
capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000003840))

[  539.986613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.993326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'io'}]}, 0x4)
dup3(r1, r0, 0x0)

00:02:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'io'}]}, 0x4)
dup3(r1, r0, 0x0)

00:02:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x11, 0x3}, {}], 0x30)

00:02:03 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'io'}]}, 0x4)
dup3(r1, r0, 0x0)

00:02:03 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x11, 0x3}, {}], 0x30)

00:02:03 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r2 = getpgrp(0x0)
capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000003840))

00:02:03 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:03 executing program 4:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'io'}]}, 0x4)
dup3(r1, r0, 0x0)

00:02:03 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x11, 0x3}, {}], 0x30)

00:02:03 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r2 = getpgrp(0x0)
capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000003840))

[  541.004325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:03 executing program 0:
r0 = socket$kcm(0xa, 0x40122000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000140), 0x4)
sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000480)=[{&(0x7f0000000000)="f4001100002b2c25e994efd18498d6623abaa68754a3ffffff8002000000000000000000000000003a00000000000000c00195c1e2d4f32ebdbed8285538dd308252644135333a847bbaeb4e914b976c5bb59d", 0x53}], 0x1}, 0x0)

00:02:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet(0x2, 0x4, 0x8001, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kexec_load(0x201ef1c0, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d3e47000, 0x1000000}], 0x3e0000000000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='irlan0\x00', 0x10)

[  541.249112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:04 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

[  542.017780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:05 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:05 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r2 = getpgrp(0x0)
capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000003840))

00:02:05 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet(0x2, 0x4, 0x8001, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kexec_load(0x201ef1c0, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d3e47000, 0x1000000}], 0x3e0000000000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='irlan0\x00', 0x10)

00:02:05 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:05 executing program 4:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8)=0x1b, 0x800000000024)
creat(&(0x7f0000000200)='./bus\x00', 0x0)

00:02:05 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

[  543.107280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:05 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

[  543.234089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.256822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
00:02:06 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:06 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80)
close(r1)

00:02:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet(0x2, 0x4, 0x8001, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kexec_load(0x201ef1c0, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d3e47000, 0x1000000}], 0x3e0000000000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='irlan0\x00', 0x10)

00:02:06 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:06 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000000000), 0x0)

00:02:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet(0x2, 0x4, 0x8001, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
kexec_load(0x201ef1c0, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d3e47000, 0x1000000}], 0x3e0000000000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='irlan0\x00', 0x10)

00:02:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da15}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0)

00:02:07 executing program 5:
r0 = socket(0x400400000000010, 0x100000003, 0x0)
write(r0, &(0x7f0000000000)="240000002100255107000165ff00fc020200000900100f000ee1000c0800060000000000", 0x24)

00:02:07 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x10080}, "706f727431000000000000000000000000000000000000000000000000000000000000000100", 0xa9824f69d1376637, 0x10800b})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:07 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000000000), 0x0)

[  544.502706] netlink: 'syz-executor3': attribute type 3 has an invalid length.
00:02:07 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0xffffa888, 0x0, 0x8}}}}}}, &(0x7f0000000100))

00:02:07 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0xffffa888, 0x0, 0x8}}}}}}, &(0x7f0000000100))

00:02:07 executing program 5:
r0 = socket(0x400400000000010, 0x100000003, 0x0)
write(r0, &(0x7f0000000000)="240000002100255107000165ff00fc020200000900100f000ee1000c0800060000000000", 0x24)

00:02:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da15}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0)

00:02:07 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000000000), 0x0)

00:02:07 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0xffffa888, 0x0, 0x8}}}}}}, &(0x7f0000000100))

[  544.797380] netlink: 'syz-executor3': attribute type 3 has an invalid length.
00:02:07 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

[  545.062875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:02:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da15}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0)

00:02:07 executing program 5:
r0 = socket(0x400400000000010, 0x100000003, 0x0)
write(r0, &(0x7f0000000000)="240000002100255107000165ff00fc020200000900100f000ee1000c0800060000000000", 0x24)

00:02:07 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000000000), 0x0)

00:02:07 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0xffffa888, 0x0, 0x8}}}}}}, &(0x7f0000000100))

00:02:07 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[  545.368481] netlink: 'syz-executor3': attribute type 3 has an invalid length.
00:02:08 executing program 5:
r0 = socket(0x400400000000010, 0x100000003, 0x0)
write(r0, &(0x7f0000000000)="240000002100255107000165ff00fc020200000900100f000ee1000c0800060000000000", 0x24)

00:02:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da15}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0)

00:02:08 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x18)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)}, 0x0)

00:02:08 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[  545.588845] netlink: 'syz-executor3': attribute type 3 has an invalid length.
00:02:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x4000000000002, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000100)={"7369743000258000000001e000000e02", @ifru_ivalue})

[  545.871905] kauditd_printk_skb: 1 callbacks suppressed
[  545.871921] audit: type=1326 audit(1540339328.503:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22380 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:08 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:08 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:02:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x65, 0x105}, 0x14}}, 0x0)

00:02:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x18)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)}, 0x0)

00:02:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x4000000000002, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000100)={"7369743000258000000001e000000e02", @ifru_ivalue})

00:02:08 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x65, 0x105}, 0x14}}, 0x0)

00:02:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x4000000000002, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000100)={"7369743000258000000001e000000e02", @ifru_ivalue})

00:02:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x18)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)}, 0x0)

[  546.462490] audit: type=1326 audit(1540339329.103:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22380 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:09 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:09 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:02:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x65, 0x105}, 0x14}}, 0x0)

00:02:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket(0x10, 0x4000000000002, 0x0)
ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000100)={"7369743000258000000001e000000e02", @ifru_ivalue})

[  546.941573] audit: type=1326 audit(1540339329.583:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22433 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x65, 0x105}, 0x14}}, 0x0)

00:02:09 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x18)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000080)}, 0x0)

00:02:09 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:09 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

[  547.332519] audit: type=1326 audit(1540339329.973:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22439 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
[  547.462684] audit: type=1326 audit(1540339330.093:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22441 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
[  547.570139] audit: type=1326 audit(1540339330.213:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22456 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
[  547.594648] audit: type=1326 audit(1540339330.233:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22451 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

[  547.876172] audit: type=1326 audit(1540339330.513:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22465 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:10 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:10 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

[  548.222910] audit: type=1326 audit(1540339330.863:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22469 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

[  548.264021] audit: type=1326 audit(1540339330.903:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22471 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0
00:02:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:11 executing program 1:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:11 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:11 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockname(r4, &(0x7f00000006c0)=@ipx, &(0x7f0000000440)=0x10)
setsockopt$inet_int(r4, 0x8000000000000000, 0xca, &(0x7f0000000000)=0x10001, 0x10)
socket$alg(0x26, 0x5, 0x0)
r6 = dup2(r2, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240))
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000500)={'\x00', {0x2, 0x4e22, @broadcast}})
pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400)=0xfffffffffffffff8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
prctl$seccomp(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6b5e7eed, 0x200, 0x20}, {0x9, 0xffffffff80000000, 0x800, 0xa91}, {0xffffffffa8757516, 0x200, 0x8001, 0x100000001}, {0x7ff, 0x7, 0x1}]})

00:02:12 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

[  549.772297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:02:12 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

[  550.039955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:02:12 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:12 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
setrlimit(0x7, &(0x7f0000000080))
clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000))
sigaltstack(&(0x7f00004b5000/0x3000)=nil, &(0x7f0000000040))
read(r0, &(0x7f0000000340)=""/100, 0x64)

00:02:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:13 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

[  550.453030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
00:02:13 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:13 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:13 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:13 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000058c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/109, 0x6d}}], 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)

00:02:13 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
setrlimit(0x7, &(0x7f0000000080))
clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000))
sigaltstack(&(0x7f00004b5000/0x3000)=nil, &(0x7f0000000040))
read(r0, &(0x7f0000000340)=""/100, 0x64)

00:02:13 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000380)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0xfff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000a00)=0x5, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10)
io_setup(0x4, &(0x7f00000000c0)=<r4=>0x0)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000340)={0x143e, 0x1, 0x7, 0x43b, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480)=0x8b0d, 0x4)
io_destroy(r4)
lookup_dcookie(0x9, &(0x7f0000000200)=""/166, 0xa6)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0))
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xc7f, 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000b94000)=""/246)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0xfde5)
getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000003c0)={@empty, <r6=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x62, r6})
connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
sendto$inet(r2, &(0x7f00000006c0)="b3226a0000e8bae00773c2f964b5b7e6dac7dbd144298da2d729582da209dd93f250fc09c46fc8d5526d14d43be615061cbf9669e610d965261f536e12d6141ec1f4e9c1534d86f66397ef4f2c670cc39bd9a08eb7f6019bdcd600", 0x5b, 0x4003ffc, &(0x7f0000be1000)={0x2, 0x4e23}, 0x10)

00:02:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

00:02:14 executing program 4:
r0 = socket(0x2, 0x3, 0x40000000000000ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00\x00\x00\x00\b\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

00:02:14 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000058c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/109, 0x6d}}], 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)

00:02:14 executing program 4:
r0 = socket(0x2, 0x3, 0x40000000000000ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00\x00\x00\x00\b\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

00:02:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r1=>0x0})
socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000027c0))
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0)

00:02:14 executing program 3:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:14 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
setrlimit(0x7, &(0x7f0000000080))
clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000))
sigaltstack(&(0x7f00004b5000/0x3000)=nil, &(0x7f0000000040))
read(r0, &(0x7f0000000340)=""/100, 0x64)

00:02:14 executing program 4:
r0 = socket(0x2, 0x3, 0x40000000000000ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00\x00\x00\x00\b\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

00:02:14 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000058c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/109, 0x6d}}], 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)

00:02:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r1=>0x0})
socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000027c0))
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0)

00:02:14 executing program 3:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:14 executing program 2:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 4:
r0 = socket(0x2, 0x3, 0x40000000000000ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x50, &(0x7f0000000140)}, 0xc)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00\x00\x00\x00\b\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)

00:02:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r1=>0x0})
socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000027c0))
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0)

00:02:15 executing program 3:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 4:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000058c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/109, 0x6d}}], 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0)

00:02:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', <r1=>0x0})
socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f00000027c0))
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xffffff9e, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @empty=[0xf0ffffff]}]}, 0x28}}, 0x0)

00:02:15 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
setrlimit(0x7, &(0x7f0000000080))
clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000))
sigaltstack(&(0x7f00004b5000/0x3000)=nil, &(0x7f0000000040))
read(r0, &(0x7f0000000340)=""/100, 0x64)

00:02:15 executing program 2:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 1:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 3:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 4:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 5:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:15 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0xfd2f000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c)

00:02:16 executing program 4:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 2:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 1:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 5:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0xfd2f000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c)

00:02:16 executing program 1:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 2:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
clone(0x80802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
unshare(0x400)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
mq_notify(r0, &(0x7f0000000000))

00:02:16 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x0, @dev, 'ip_vti0\x00'}}, 0x1e)

00:02:16 executing program 5:
r0 = socket$inet6(0xa, 0x2001000000000002, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, &(0x7f00000002c0)=0xe)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x11, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x1d, r2})
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r2})
r4 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="6c80dee22064ecc2e1a0f2bc4df55a7f4ee9b0d78c9e3fb08476e7c97b207cc059cb1ff0c49f962332426fa0b1501af6d8dfeb908d5536ea067a5659b04086344f5d2f19", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb)
r5 = semget(0x3, 0x0, 0x2e2)
semtimedop(r5, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x991, 0x0, 0x7a659432}]})
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r6 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000280)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x80045300, &(0x7f0000000000))

00:02:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:16 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0xfd2f000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c)

00:02:16 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:16 executing program 2:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
clone(0x80802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
unshare(0x400)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
mq_notify(r0, &(0x7f0000000000))

00:02:16 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:16 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x0, @dev, 'ip_vti0\x00'}}, 0x1e)

00:02:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:16 executing program 2:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
clone(0x80802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
unshare(0x400)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
mq_notify(r0, &(0x7f0000000000))

00:02:17 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c)
bpf$MAP_CREATE(0xfd2f000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c)

00:02:17 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x0, @dev, 'ip_vti0\x00'}}, 0x1e)

00:02:17 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:17 executing program 2:
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
clone(0x80802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
unshare(0x400)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
mq_notify(r0, &(0x7f0000000000))

00:02:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:17 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x0, @dev, 'ip_vti0\x00'}}, 0x1e)

00:02:17 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:17 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 4:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:17 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:17 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:17 executing program 4:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:17 executing program 3:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:18 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r1, r0)

00:02:18 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[]}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
unshare(0x60000)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil)
unlink(&(0x7f0000000200)='./control/file0\x00')
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d0100000000fffffff600000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e", 0x56, 0x10000}], 0x0, &(0x7f0000000140))

00:02:18 executing program 4:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
getpgrp(0x0)
getpgrp(0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x200000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x0, 0x96, 0x80000001, 0x100, 0x98d, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6bea202a, 0x20, 0x9, 0x9, 0x2})
gettid()
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000200)={0x401, 0x0, 0x1})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f8571")
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000680))
setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0), 0x0)

00:02:18 executing program 3:
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004780)={0x8, "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", 0x1e6}, 0x1272)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4)
setns(r0, 0x0)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6cf0)
clone(0x0, &(0x7f00000036c0), &(0x7f0000000240), &(0x7f0000003700), &(0x7f0000000200))

00:02:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:18 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:18 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0xb0000, &(0x7f0000000280)}, &(0x7f0000000080)="1c0af49afb4b", &(0x7f00000000c0)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

00:02:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x2794a437d75b4f29, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b})

00:02:18 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:18 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r1, r0)

00:02:18 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0xb0000, &(0x7f0000000280)}, &(0x7f0000000080)="1c0af49afb4b", &(0x7f00000000c0)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

00:02:19 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0xb0000, &(0x7f0000000280)}, &(0x7f0000000080)="1c0af49afb4b", &(0x7f00000000c0)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

00:02:19 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 3:
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004780)={0x8, "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", 0x1e6}, 0x1272)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4)
setns(r0, 0x0)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6cf0)
clone(0x0, &(0x7f00000036c0), &(0x7f0000000240), &(0x7f0000003700), &(0x7f0000000200))

00:02:19 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:19 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0xb0000, &(0x7f0000000280)}, &(0x7f0000000080)="1c0af49afb4b", &(0x7f00000000c0)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

00:02:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r1, r0)

00:02:19 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:19 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:19 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r1, &(0x7f0000aacfe4), 0x1c)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)

00:02:19 executing program 3:
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004780)={0x8, "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", 0x1e6}, 0x1272)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4)
setns(r0, 0x0)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6cf0)
clone(0x0, &(0x7f00000036c0), &(0x7f0000000240), &(0x7f0000003700), &(0x7f0000000200))

00:02:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c)

00:02:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r1, r0)

00:02:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c)

00:02:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x1801}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary='U'}]}]}, 0x20}}, 0x0)

00:02:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070")
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10)
sendto$inet(r0, &(0x7f0000000200)="2e12fa6d3c3f07d5f683895884851f119a560e10e644ac31a18a14639be0a779e064e7195eceb0921866146e97e3d467cb085e50f33b327fd752ba40ef7b339200ba656ca891df09e5af02e0a22d95247d13c8063e0cf86a05e1682f3b5a0bee7296a961fc7e3a99caa6981ae9f0be2b37e8b62026981229e8fabb7a98440460a2e9", 0x82, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6)
shutdown(r0, 0x1)

00:02:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c)

00:02:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x1801}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary='U'}]}]}, 0x20}}, 0x0)

00:02:20 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c)

00:02:20 executing program 3:
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004780)={0x8, "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", 0x1e6}, 0x1272)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4)
setns(r0, 0x0)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6cf0)
clone(0x0, &(0x7f00000036c0), &(0x7f0000000240), &(0x7f0000003700), &(0x7f0000000200))

00:02:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x1801}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary='U'}]}]}, 0x20}}, 0x0)

00:02:20 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000240)="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")
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)

00:02:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev, 0x7}}}, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x9]}, 0x2c)

00:02:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x1801}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary='U'}]}]}, 0x20}}, 0x0)

00:02:20 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20)

00:02:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:20 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20)

00:02:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev, 0x7}}}, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x9]}, 0x2c)

00:02:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20)

00:02:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:21 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20)

00:02:21 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev, 0x7}}}, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x9]}, 0x2c)

00:02:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)

00:02:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000980)={@multicast1, @remote, @broadcast}, 0xc)

00:02:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:21 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev, 0x7}}}, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x9]}, 0x2c)

00:02:21 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x37})

00:02:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000980)={@multicast1, @remote, @broadcast}, 0xc)

00:02:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:21 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x37})

00:02:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x2, @remote}, 0x0, [0x0, 0x0, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x80]}, 0x5c)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x400, 0x173, 0x152, 0xffffffff, 0x0, 0x8}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae7854cdaad59c34e4076482195afe14688f7c8d9e58461082c96e271dd2e6c52018d1cff96d4e23d9853f8ac0eda42f324a1e1590447ec9a7b58757a01b264117ef55a1d60bea94457b6f"}, 0x93)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000018000000000000000"], 0x10}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x7, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:02:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000980)={@multicast1, @remote, @broadcast}, 0xc)

00:02:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:21 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x37})

00:02:21 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000980)={@multicast1, @remote, @broadcast}, 0xc)

00:02:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:22 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:22 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:22 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x37})

00:02:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0)

00:02:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}})
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:22 executing program 2:
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000))

00:02:22 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)

00:02:22 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:22 executing program 2:
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000))

00:02:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}})
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:22 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x8, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400})
semctl$IPC_RMID(r1, 0x0, 0x0)

00:02:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0)

00:02:22 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}})
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:22 executing program 2:
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000))

00:02:22 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}})
r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

00:02:22 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:22 executing program 2:
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000))

00:02:22 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0)

00:02:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000000004)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000b80)={&(0x7f0000000100), 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000004340)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000044c0))
sendmsg$nl_generic(r1, &(0x7f00005a5000)={&(0x7f000059fff4), 0xc, &(0x7f0000007000)={&(0x7f0000070000)={0x28, 0x1c, 0x109, 0x0, 0x0, {0x40000001}, [@nested={0x14, 0x2, [@typed={0x10, 0x0, @u64}]}]}, 0x28}}, 0x0)

00:02:23 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:23 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:23 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:23 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000000004)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000b80)={&(0x7f0000000100), 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000004340)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000044c0))
sendmsg$nl_generic(r1, &(0x7f00005a5000)={&(0x7f000059fff4), 0xc, &(0x7f0000007000)={&(0x7f0000070000)={0x28, 0x1c, 0x109, 0x0, 0x0, {0x40000001}, [@nested={0x14, 0x2, [@typed={0x10, 0x0, @u64}]}]}, 0x28}}, 0x0)

00:02:23 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0)

00:02:23 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000080)}}], 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0)

00:02:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000000004)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000b80)={&(0x7f0000000100), 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000004340)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000044c0))
sendmsg$nl_generic(r1, &(0x7f00005a5000)={&(0x7f000059fff4), 0xc, &(0x7f0000007000)={&(0x7f0000070000)={0x28, 0x1c, 0x109, 0x0, 0x0, {0x40000001}, [@nested={0x14, 0x2, [@typed={0x10, 0x0, @u64}]}]}, 0x28}}, 0x0)

00:02:23 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:23 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:23 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:23 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:23 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:23 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000000004)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000b80)={&(0x7f0000000100), 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000004340)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000044c0))
sendmsg$nl_generic(r1, &(0x7f00005a5000)={&(0x7f000059fff4), 0xc, &(0x7f0000007000)={&(0x7f0000070000)={0x28, 0x1c, 0x109, 0x0, 0x0, {0x40000001}, [@nested={0x14, 0x2, [@typed={0x10, 0x0, @u64}]}]}, 0x28}}, 0x0)

00:02:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:24 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:24 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:24 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:24 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:24 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:24 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x80000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)

00:02:24 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:24 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:24 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:25 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffe1})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61)
read(r0, &(0x7f00000000c0)=""/11, 0xb)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCSETA(r3, 0x541a, &(0x7f0000000140))

00:02:25 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:25 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xfffff7fffffffffd, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
ioctl(r2, 0x8912, &(0x7f0000000280)="15496234488dd25d766070")
listen(r1, 0x0)

00:02:25 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:25 executing program 0:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:26 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:26 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x31, &(0x7f0000000000), 0x8)

00:02:26 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:26 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:26 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/67, 0x43}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000237)

00:02:27 executing program 0:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:27 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:27 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x6}, {0x0, 0x0, 0x1800}], 0x3, &(0x7f0000000140))
close(r1)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000")
sendfile(r2, r3, &(0x7f0000000180)=0xf010b, 0x100000001)
mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

00:02:27 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/67, 0x43}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000237)

00:02:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:27 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:27 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:27 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, &(0x7f0000002ec0)=0x50, 0x7fff)

00:02:27 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/67, 0x43}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000237)

[  565.243256] kauditd_printk_skb: 7 callbacks suppressed
[  565.243281] audit: type=1804 audit(1540339347.883:199): pid=23456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/678/bus" dev="sda1" ino=17233 res=1
00:02:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:28 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, &(0x7f0000002ec0)=0x50, 0x7fff)

[  565.390687] audit: type=1804 audit(1540339347.923:200): pid=23456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/678/bus" dev="sda1" ino=17233 res=1
[  565.566541] audit: type=1804 audit(1540339347.923:201): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/678/bus" dev="sda1" ino=17233 res=1
[  565.690366] audit: type=1804 audit(1540339348.233:202): pid=23469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/679/bus" dev="sda1" ino=17073 res=1
00:02:28 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:28 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200), 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400})
sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605)

00:02:28 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/67, 0x43}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000237)

00:02:28 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:28 executing program 0:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:28 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, &(0x7f0000002ec0)=0x50, 0x7fff)

[  565.835086] audit: type=1804 audit(1540339348.473:203): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/680/bus" dev="sda1" ino=16881 res=1
00:02:28 executing program 1:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendfile(r3, r1, &(0x7f0000002ec0)=0x50, 0x7fff)

00:02:28 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

[  566.009889] audit: type=1804 audit(1540339348.653:204): pid=23494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/681/bus" dev="sda1" ino=16520 res=1
00:02:28 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:28 executing program 5:
r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x17, r0, 0x0, r2)

00:02:28 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:28 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r1)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0)

00:02:29 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:29 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:29 executing program 0:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a8000000e95c447579ccce6e9e5312347334877f0e7520fc04e4d10a4244b779060000000000000094e40026408ec87dcbb133fd9cd060b0b5130a4128b58c43e97fc9ca26cf033a64a5d1d631d4e4d106eba7b539d2c90eb6cf7491e4c8f9c6c229663386551726356016b894371d404762021a5239e356914268943dc72715a7dff7ead1e57ce30230fb52e18542020d16dd0420eb38f0391dea35d8188ac7f11d4f0b48071c282dd7aec168f158396a0ceca7d61e3a535d8a314c1f719c00d5b2a1c107c46b20d7aa", @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
clone(0x100000000000000, &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe4, &(0x7f00000009c0))

00:02:29 executing program 5:
r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x17, r0, 0x0, r2)

00:02:29 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:29 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r1)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0)

00:02:29 executing program 5:
r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x17, r0, 0x0, r2)

00:02:29 executing program 5:
r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
keyctl$chown(0x17, r0, 0x0, r2)

00:02:29 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb011, &(0x7f0000000100)=[{}]})
ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174)

00:02:29 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r1)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0)

00:02:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32}]}]}, 0x20}}, 0x0)

00:02:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e)
r1 = syz_open_pts(r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17})

00:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32}]}]}, 0x20}}, 0x0)

00:02:30 executing program 1:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:30 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r1, r1)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0)

00:02:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x81000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe}})

[  567.767162] audit: type=1800 audit(1540339350.403:205): pid=23569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=17025 res=0
00:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32}]}]}, 0x20}}, 0x0)

00:02:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x81000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe}})

00:02:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x81000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe}})

00:02:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32}]}]}, 0x20}}, 0x0)

00:02:30 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000006c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000780)={0x0, 0x0, 0x4}, &(0x7f00000007c0)=0x10)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x4, 0x0)
accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000100)=0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)
sendto$inet6(r4, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c)
fsetxattr(r1, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='keyring+%\x00', 0xa, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r5, 0x401104000000016)

00:02:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e)
r1 = syz_open_pts(r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17})

00:02:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x81000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe}})

[  568.348264] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
00:02:31 executing program 1:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

[  568.423499] audit: type=1800 audit(1540339351.063:206): pid=23604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=17025 res=0
00:02:31 executing program 3:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

[  568.722903] audit: type=1800 audit(1540339351.363:207): pid=23613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=17252 res=0
00:02:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:31 executing program 1:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

[  568.886929] audit: type=1800 audit(1540339351.523:208): pid=23620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="bus" dev="sda1" ino=17235 res=0
00:02:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000006c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000780)={0x0, 0x0, 0x4}, &(0x7f00000007c0)=0x10)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x4, 0x0)
accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000100)=0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)
sendto$inet6(r4, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c)
fsetxattr(r1, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='keyring+%\x00', 0xa, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r5, 0x401104000000016)

[  569.109426] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
00:02:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e)
r1 = syz_open_pts(r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17})

00:02:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:32 executing program 3:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:32 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

00:02:32 executing program 1:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000006c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000780)={0x0, 0x0, 0x4}, &(0x7f00000007c0)=0x10)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x4, 0x0)
accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000100)=0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)
sendto$inet6(r4, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c)
fsetxattr(r1, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='keyring+%\x00', 0xa, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r5, 0x401104000000016)

00:02:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x80000000000201, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="15523d0d15349ed7926e313fd076bb5ae8a87cef7925e2867ebac8c12532cba637386d378f67875a06f216ef63a274ea6a7c762e1113e2b356f331c847ce09457d7dc7e4a0b34f7d43fbaafc60a3eaba2dd9f539a50cbe66a8abc65d9484bf25b5bbb3c7fec901c20fbfdc622d6bc7ce22290fa1ad2e8016932a777f0a7c7d57fddd", @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32], 0x1e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0)
fallocate(r2, 0x8, 0xffff, 0xfff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0xfffffcfc}], 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fffffff})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @broadcast}, 0x10)
read(r1, &(0x7f0000000240)=""/19, 0x129)

[  570.286181] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
00:02:33 executing program 2:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8afb84f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14)
recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000001680))

00:02:33 executing program 2:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8afb84f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14)
recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000001680))

00:02:33 executing program 3:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e)
r1 = syz_open_pts(r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17})

00:02:33 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000006c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000780)={0x0, 0x0, 0x4}, &(0x7f00000007c0)=0x10)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x4, 0x0)
accept4(r0, &(0x7f00000001c0)=@hci, &(0x7f0000000100)=0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5)
sendto$inet6(r4, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c)
fsetxattr(r1, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='keyring+%\x00', 0xa, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r5, 0x401104000000016)

00:02:33 executing program 2:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8afb84f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14)
recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000001680))

[  570.995885] kauditd_printk_skb: 4 callbacks suppressed
[  570.995899] audit: type=1800 audit(1540339353.633:213): pid=23681 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="bus" dev="sda1" ino=17244 res=0
[  571.004199] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
00:02:33 executing program 1:
eventfd(0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x5c)
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000240)="dc4dc128751c5f82fab4c882c3f791bbe144d51ecf65ffefd611e391253ce91ee4430f497b")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x900000000000000)

[  571.099730] audit: type=1800 audit(1540339353.683:214): pid=23690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=17260 res=0
00:02:33 executing program 2:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8afb84f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x14)
recvmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000001680))

00:02:34 executing program 2:
socketpair(0x1e, 0x5, 0x0, &(0x7f0000003dc0)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, &(0x7f0000000640)=""/21, 0x15}, 0x0)

00:02:34 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:34 executing program 2:
socketpair(0x1e, 0x5, 0x0, &(0x7f0000003dc0)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, &(0x7f0000000640)=""/21, 0x15}, 0x0)

00:02:34 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000340))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4)
sched_setscheduler(r1, 0x5, &(0x7f0000000140))
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)

00:02:34 executing program 2:
socketpair(0x1e, 0x5, 0x0, &(0x7f0000003dc0)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, &(0x7f0000000640)=""/21, 0x15}, 0x0)

00:02:34 executing program 3:
socketpair$unix(0x1, 0x2000000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:34 executing program 2:
socketpair(0x1e, 0x5, 0x0, &(0x7f0000003dc0)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, &(0x7f0000000640)=""/21, 0x15}, 0x0)

00:02:34 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:34 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000340))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4)
sched_setscheduler(r1, 0x5, &(0x7f0000000140))
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)

00:02:34 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x28}, {r0, 0x410}, {}, {0xffffffffffffffff, 0x200}], 0x4, 0x7)
fallocate(r0, 0x10, 0x0, 0x1000f2)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
sendfile(r1, r1, &(0x7f0000d83ff8)=0x2a00, 0x8000fffffffe)

00:02:34 executing program 3:
socketpair$unix(0x1, 0x2000000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:34 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:35 executing program 3:
socketpair$unix(0x1, 0x2000000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  572.346242] audit: type=1800 audit(1540339354.983:215): pid=23753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16514 res=0
00:02:35 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000340))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4)
sched_setscheduler(r1, 0x5, &(0x7f0000000140))
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)

00:02:35 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:35 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:35 executing program 3:
socketpair$unix(0x1, 0x2000000000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @dev}]}, 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:35 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
pipe(&(0x7f0000000340))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4)
sched_setscheduler(r1, 0x5, &(0x7f0000000140))
bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)

00:02:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:35 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:35 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

[  573.122279] audit: type=1804 audit(1540339355.763:216): pid=23794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/651/bus" dev="sda1" ino=17261 res=1
00:02:35 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:35 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:35 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x40600)
getsockopt$sock_cred(r0, 0x1, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

00:02:36 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:36 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x0, 0x10000000002)
prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x13000, 0x1000, &(0x7f0000a53000/0x1000)=nil})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000640)='./file0\x00', &(0x7f00000001c0)=""/170, 0xfffffffffffffd20)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00')
r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r3, 0x500, 0x70bd27}, 0x14}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0)
epoll_create1(0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3)
sysfs$3(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080))
write$binfmt_misc(r4, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40)

00:02:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x40600)
getsockopt$sock_cred(r0, 0x1, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

00:02:36 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7)

00:02:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x40600)
getsockopt$sock_cred(r0, 0x1, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

[  574.121304] audit: type=1804 audit(1540339356.763:217): pid=23794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/651/bus" dev="sda1" ino=17261 res=1
[  574.148266] audit: type=1804 audit(1540339356.763:218): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/651/bus" dev="sda1" ino=17261 res=1
[  574.172473] audit: type=1804 audit(1540339356.763:219): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/651/bus" dev="sda1" ino=17261 res=1
00:02:36 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:36 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x40600)
getsockopt$sock_cred(r0, 0x1, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0xc)

00:02:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7)

00:02:37 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0x29, 0x75, 0x1, {0x1e, "4a42d6a74bd560f471df53ea658a80c30735e695ca2f283b5198347e63c1"}}, 0x29)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0x25, 0x75, 0x1, {0x1a, "89d305ba705a8adbf615418d4f2eaafcd8173f951a14c788ec28"}}, 0x25)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r3, r4, &(0x7f0000000040), 0x10000000000443)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1)
read(r3, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r3, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev}, 0x10)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0)

00:02:37 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:37 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[  574.744310] audit: type=1804 audit(1540339357.383:220): pid=23872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/685/bus" dev="sda1" ino=16527 res=1
[  574.922268] audit: type=1804 audit(1540339357.563:221): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/270/bus" dev="sda1" ino=16594 res=1
00:02:37 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7)

00:02:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:38 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7)

00:02:38 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:38 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[  576.020342] audit: type=1804 audit(1540339358.663:222): pid=23905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/653/bus" dev="sda1" ino=16865 res=1
00:02:39 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:39 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

00:02:39 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:39 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:39 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:39 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[  577.250658] audit: type=1804 audit(1540339359.893:223): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir153602228/syzkaller.nvZYLC/163/bus" dev="sda1" ino=16817 res=1
[  577.389447] audit: type=1804 audit(1540339359.913:224): pid=23937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir976367562/syzkaller.j8SBy6/667/bus" dev="sda1" ino=16834 res=1
[  577.693329] audit: type=1804 audit(1540339359.933:225): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/271/bus" dev="sda1" ino=16881 res=1
00:02:40 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5, {<r3=>0x0, @in6={{0xa, 0x4e22, 0x2aa, @mcast1, 0x401}}, 0x0, 0x4, 0x6, 0x0, 0x1}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000700)=@sack_info={<r4=>r3, 0x1}, &(0x7f0000000180)=0xc)
recvfrom(r2, &(0x7f0000000440)=""/57, 0x39, 0x10002, &(0x7f0000000480)=@l2={0x1f, 0x6cc, {0x0, 0x100000001, 0x9, 0x0, 0x7, 0xfffffffffffffffe}, 0xdd0, 0x8}, 0x80)
pwrite64(r2, &(0x7f00000005c0)="23e66cba40bfce87265f8e077ffe6efa02824895101ecb231f0daf39d35591909e6a48350e1704eb78beeef10c98d413b82531e86341243b7a20f28926b020f95f7da68b368ffbcd1a72cbdf367711bcb7b35ea86f9106198549a26512fb7b4c5495d6f20b28", 0x66, 0x0)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="e1b4c4c599ffee97f7fc15b721b51480ca55535cd9a67fa92b83fd20785f52fbc4786e4a9e74e7d088fc81fc9f398548755ca5fdbb81ebb9d695"], 0x3a)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r4, @in={{0x2, 0x4e24, @remote}}, 0x80000001, 0xc779, 0x15, 0x56af}, &(0x7f00000000c0)=0x98)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080))
r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0)
sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x3)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0xe8030000, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0)
gettid()
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[  577.854665] audit: type=1804 audit(1540339359.993:226): pid=23933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/686/bus" dev="sda1" ino=16563 res=1
00:02:41 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  578.859871] audit: type=1804 audit(1540339361.493:227): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir192008059/syzkaller.OPfkOA/654/bus" dev="sda1" ino=16642 res=1
00:02:41 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  579.444876] audit: type=1804 audit(1540339362.083:228): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/701/bus" dev="sda1" ino=16678 res=1
00:02:42 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  580.410601] audit: type=1804 audit(1540339363.053:229): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/687/bus" dev="sda1" ino=16527 res=1
[  580.563847] audit: type=1804 audit(1540339363.113:230): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir153602228/syzkaller.nvZYLC/164/bus" dev="sda1" ino=16754 res=1
00:02:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  581.222414] audit: type=1804 audit(1540339363.853:231): pid=23971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir883848809/syzkaller.GTYZVw/272/bus" dev="sda1" ino=16770 res=1
00:02:44 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:44 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  581.703823] audit: type=1804 audit(1540339364.343:232): pid=23974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir976367562/syzkaller.j8SBy6/668/bus" dev="sda1" ino=16769 res=1
00:02:44 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  581.868114] audit: type=1804 audit(1540339364.503:233): pid=23977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/702/bus" dev="sda1" ino=16678 res=1
[  582.080384] audit: type=1804 audit(1540339364.723:234): pid=23982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/688/bus" dev="sda1" ino=16548 res=1
00:02:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  582.532402] audit: type=1804 audit(1540339365.173:235): pid=23988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir153602228/syzkaller.nvZYLC/165/bus" dev="sda1" ino=16739 res=1
00:02:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)

00:02:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)

00:02:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0)
memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket(0xa, 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)

00:02:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)

00:02:45 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4000000000004e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800f, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x0, 0x0, 0x507a000000000000]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

00:02:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:46 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

[  583.557569] audit: type=1804 audit(1540339366.193:236): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir044047901/syzkaller.OcpXLL/703/bus" dev="sda1" ino=16657 res=1
00:02:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0)
memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket(0xa, 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  583.761351] audit: type=1804 audit(1540339366.403:237): pid=24025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir976367562/syzkaller.j8SBy6/669/bus" dev="sda1" ino=16542 res=1
00:02:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4000000000004e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800f, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x0, 0x0, 0x507a000000000000]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

00:02:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:46 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x0, 0x10001, 0x0, 0x3f00}})

00:02:46 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x0, 0x10001, 0x0, 0x3f00}})

[  584.397362] audit: type=1804 audit(1540339367.033:238): pid=24039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/689/bus" dev="sda1" ino=16690 res=1
00:02:47 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x0, 0x10001, 0x0, 0x3f00}})

00:02:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0)
memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket(0xa, 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:47 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x0, 0x10001, 0x0, 0x3f00}})

00:02:47 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4000000000004e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800f, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x0, 0x0, 0x507a000000000000]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

00:02:47 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

[  585.109188] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0
00:02:49 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x1, &(0x7f0000000380), 0x0)
memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
socket(0xa, 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="f2a766ba610066ed48b813c4830f000000000f23d00f21f835300000000f23f866ba2000edc441175d392e67450f01cb0fc72cbe67400f001066ba4100b0a8ee36420f015900", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:49 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:49 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4000000000004e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800f, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x0, 0x0, 0x507a000000000000]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

[  586.777461] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0
00:02:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
lseek(r0, 0x0, 0x2)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='}'], 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)="292b2a2d656d30035b3a4047504c5a2173797374656d00")
fcntl$setstatus(r0, 0x4, 0x0)
mlockall(0x1)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe)
ftruncate(r1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0)
fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x400, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
r4 = userfaultfd(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000880))
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10)
mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000012000/0xd000)=nil, 0xd000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}})

00:02:50 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040), 0x3fffffffffffec9, 0x0, &(0x7f0000000340)={0x0, r1+30000000})
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

00:02:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x2a8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080))
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:50 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

[  587.486933] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0
00:02:50 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040), 0x3fffffffffffec9, 0x0, &(0x7f0000000340)={0x0, r1+30000000})
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

[  587.568270] audit: type=1804 audit(1540339370.203:239): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/690/bus" dev="sda1" ino=16997 res=1
00:02:50 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040), 0x3fffffffffffec9, 0x0, &(0x7f0000000340)={0x0, r1+30000000})
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

00:02:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x2a8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080))
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:50 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000000040), 0x3fffffffffffec9, 0x0, &(0x7f0000000340)={0x0, r1+30000000})
poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0)

00:02:50 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0)
close(r0)

00:02:50 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)
vmsplice(r0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c7427bec690b637742565adecc804f069520068446dfbacad06f0cd1c23d1b1084a34712c3b23300a275fc275e3fb914f6eee54b1353732d7599cc9e1120fa7a37c71fe98c7f657c54ded6b55c6fa749bd199e776ffbb6448cd7d24b47506e62333419c3b964a24e3b58eb438a435b068a7c5ac560dfbfde7ad12a250b46f621616df4c5367540ec703fbd5cec6997e656bd738692820a55558505cee0b73648bbd92de824fa50cd5d348a4546", 0xad}], 0x1, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10)
userfaultfd(0x80800)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'})
shutdown(r1, 0x1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000})

00:02:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x2a8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080))
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:50 executing program 1:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)="ba0200000000000000e99f5b02adc2f2", 0x10}], 0x1, &(0x7f0000000140)}, 0x0)

00:02:51 executing program 0:
add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x8c)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x20000000400}, 0x10)
r3 = socket(0x11, 0x80002, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000280))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4)
bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5)
r4 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x1500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000001580)={@multicast1, @empty, <r6=>0x0}, &(0x7f0000000140))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in6}}}, &(0x7f0000001700)=0xe8)
creat(&(0x7f0000000400)='./file0\x00', 0x10)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB=',cache=loose,measure,\x00'])
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001740)={{{@in6, @in, 0x4e24, 0x2, 0x0, 0x7f, 0x0, 0xa0, 0x20, 0x89, r6, r8}, {0xff, 0x1, 0x100, 0x7fffffff, 0x830, 0x1, 0xfffffffffffffc01, 0xffffffffffffb40d}, {0x120, 0x3, 0x7fff, 0x7}, 0xffffffff, 0x6e6bb3, 0x2, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x7db07d54674a3a5}, 0x2, @in=@rand_addr=0x6, 0x3501, 0x7, 0x3, 0x5, 0x0, 0x2, 0x935}}, 0xe8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x102, 0x0)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101001, 0x0)
ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002)
sendto$packet(r4, &(0x7f00000002c0)="fde4f5a6006491d5e934de88729de90d9ea77bb475e92cf330b7512a8c3e4e7f51626de17f17371e4c4a0eb9269a83da4790abae62dd0cb7f13c1c40f9ec3cd8e4d43ec6bb7b0cf246186709f98c0dd454", 0x51, 0x4000010, &(0x7f0000000340)={0x11, 0xf7, r7, 0x1, 0x8, 0x6, @local}, 0x14)
ioctl(r9, 0x6, &(0x7f00000001c0)="ee854bbf445ebc43033330cbb0b96b1720a6a5bf223325a71f10c6946796460d58d86de0bb45309abcd4c9f9bbb75b98c0ee4ccbc98b030f7bfdc9651ec3373b2128bc774a750c7c43c3910ccd0d0f9620b4e69b417ed142e4c57903504aa9bbf34b7d6a780f613737f3d21c7c3da1b69970c310cf6f3b1ee786acd5ad7335c771b11b047906f84bc01a0fcb62310d883127b0b7e6878c84a32602c5c7a6d2e47fbfd8d5bc0d3f7892ea66ebd54d5227818577c37c35e0ba877c769777b9baad99cc3a79c78e56ab14e39823eb49aabd1b5a92b0cf5eeea6d6ae4af014cf5d455996372f577ad7e0ac28c1b5e5ea6f6f17")
pipe(&(0x7f0000000000))

00:02:51 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0)
close(r0)

00:02:51 executing program 1:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)="ba0200000000000000e99f5b02adc2f2", 0x10}], 0x1, &(0x7f0000000140)}, 0x0)

00:02:51 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setns(r2, 0x0)

00:02:51 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0)
close(r0)

00:02:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x2a8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080))
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:51 executing program 1:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)="ba0200000000000000e99f5b02adc2f2", 0x10}], 0x1, &(0x7f0000000140)}, 0x0)

00:02:51 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setns(r2, 0x0)

00:02:51 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef73ada4753dd58b4d4b6e689d30d71c32fc0b98143e037dc1250278424e1b0368a82cc15eb4037dc12502000000b5e8", 0x38}], 0x1}, 0x0)
close(r0)

00:02:51 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setns(r2, 0x0)

00:02:51 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:02:51 executing program 1:
socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001640)="ba0200000000000000e99f5b02adc2f2", 0x10}], 0x1, &(0x7f0000000140)}, 0x0)

00:02:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:02:52 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(0x0, r1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setns(r2, 0x0)

00:02:52 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x100, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{}, {}, {<r1=>0x0}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000004c0)={r1, &(0x7f0000000440)=""/116})
fchmod(0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc))
syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{}, {0xa, 0x0, 0x7, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x5c)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)="dc4dc128751c5f82fab4c882c3f791bbe144d51ecf65ffefd611e391253ce91ee4430f497b9f8a5e9fa7b8a0075a87ef50940469a0b3011fe2da9f3f6d2609343a7a2f8e70c04ce05d27b0c91705561b28d6c225b0421bc4346d0c0adc70f9f6a5a332e213")
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x0, 0x200)

00:02:52 executing program 1:
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/240, 0xf0}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f00000014c0)=""/155, 0x9b}], 0x5, &(0x7f0000001600)=""/141, 0x8d}}, {{&(0x7f0000001a00)=@un=@abs, 0x80, &(0x7f0000001c40)}}], 0x2, 0x0, &(0x7f0000003700)={0x77359400})

00:02:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070")
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x15, &(0x7f0000000080)=""/153, &(0x7f0000000140)=0x99)

00:02:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:52 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = socket(0xa, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local, [], 0x0, 0x0, 0x0, 0x0, @local}}}}]}, [@snat={'snat\x00', 0x10, {{@local}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x0)

00:02:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

00:02:52 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {"57e3", @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {"9273", @local}}}})

00:02:52 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = socket(0xa, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local, [], 0x0, 0x0, 0x0, 0x0, @local}}}}]}, [@snat={'snat\x00', 0x10, {{@local}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x0)

[  589.665571] kernel msg: ebtables bug: please report to author: target size too small
[  589.692662] kernel msg: ebtables bug: please report to author: target size too small
00:02:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f7bc5b"])
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xb86d}, &(0x7f0000000440)=0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[  589.831195] kernel msg: ebtables bug: please report to author: target size too small
00:02:52 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = socket(0xa, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local, [], 0x0, 0x0, 0x0, 0x0, @local}}}}]}, [@snat={'snat\x00', 0x10, {{@local}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x0)

00:02:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070")
r1 = socket$inet(0x10, 0x80803, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2f0000001a0003006d0000360000000080dd07dd01080000445f32c904000f00020173730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0)

00:02:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:52 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {"57e3", @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {"9273", @local}}}})

[  590.099363] kernel msg: ebtables bug: please report to author: target size too small
00:02:52 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = socket(0xa, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local, [], 0x0, 0x0, 0x0, 0x0, @local}}}}]}, [@snat={'snat\x00', 0x10, {{@local}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x0)

[  590.159460] netlink: 'syz-executor5': attribute type 15 has an invalid length.
00:02:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f7bc5b"])
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xb86d}, &(0x7f0000000440)=0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:52 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {"57e3", @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {"9273", @local}}}})

00:02:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070")
r1 = socket$inet(0x10, 0x80803, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2f0000001a0003006d0000360000000080dd07dd01080000445f32c904000f00020173730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0)

[  590.337730] kernel msg: ebtables bug: please report to author: target size too small
00:02:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x36d)

00:02:53 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000100)={'bond0:\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@dev, @loopback}, {"57e3", @random="bb19ca170c95"}, @ah_ip4_spec={@rand_addr, @loopback}, {"9273", @local}}}})

[  590.504770] netlink: 'syz-executor5': attribute type 15 has an invalid length.
00:02:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070")
r1 = socket$inet(0x10, 0x80803, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2f0000001a0003006d0000360000000080dd07dd01080000445f32c904000f00020173730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0)

00:02:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x36d)

00:02:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

[  590.721397] netlink: 'syz-executor5': attribute type 15 has an invalid length.
00:02:53 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10121102, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000000)="10000000060000000000000017", 0xd}])

00:02:53 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070")
r1 = socket$inet(0x10, 0x80803, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2f0000001a0003006d0000360000000080dd07dd01080000445f32c904000f00020173730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0)

00:02:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x36d)

[  590.953669] netlink: 'syz-executor5': attribute type 15 has an invalid length.
00:02:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f7bc5b"])
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xb86d}, &(0x7f0000000440)=0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:53 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10121102, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000000)="10000000060000000000000017", 0xd}])

00:02:53 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f00000001c0), 0x8)

00:02:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), 0x36d)

00:02:54 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, &(0x7f0000000040))

00:02:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
fchmod(0xffffffffffffffff, 0xc)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4100, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1)
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xa001, 0x4)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x2})
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2fc2ea84, 0x0, 0x81}, &(0x7f0000000280)=0x14)

00:02:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10121102, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000000)="10000000060000000000000017", 0xd}])

00:02:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f00000001c0), 0x8)

00:02:54 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, &(0x7f0000000040))

00:02:54 executing program 3:
add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

00:02:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f7bc5b"])
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xb86d}, &(0x7f0000000440)=0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

00:02:54 executing program 3:
add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

00:02:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f00000001c0), 0x8)

00:02:54 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, &(0x7f0000000040))

00:02:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10121102, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000000)="10000000060000000000000017", 0xd}])

00:02:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f00000001c0), 0x8)

00:02:54 executing program 3:
add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

00:02:54 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:54 executing program 3:
add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)

00:02:54 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "81182e", 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, &(0x7f0000000040))

00:02:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x10}})
close(r2)
close(r1)

00:02:54 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:54 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:55 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:55 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:55 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x10}})
close(r2)
close(r1)

00:02:55 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:55 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:55 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x10}})
close(r2)
close(r1)

00:02:55 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1, &(0x7f0000000d40)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x7)
close(r0)

00:02:56 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:56 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:56 executing program 5:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:56 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"b61d3bbe52d75028290785806c026a89b9b1f382d910b3a4aa7b7a3be01627489bc78960dc4a8d8006367a195b9537b7da7acbd83e0c7d61ff9ee151c07b4a894822001e51c79ea8d975f519bd4c83773fab6d212d3bc009fdbe498bc54a964bc215400866865357fa8e35ef56474dc150404bf29ed0456914aa67901bf3d7bb3ba29e324fca8bd4a0b1b2bd278ea3a0576d82c8ae7d8e1fa5e723eee2bb10337bbd3c66f17e7948f81d8da2527dde4a2cd834303701ba103fd94a0c993fa9b5aa87cac21aa20bbe3c531f3c9e8669beca073b815e7c537fa9be19d59d746dda736ce163d030baae4f0950b5b23c7075cf9d19230bc6bf00eb1f130720d75a0f79ba1dd1d46a35bb539fc1d8a9393157a475375c53ed18909358365b478f1fbbea0a1ca9f467747ffb219a8c84c16bc5eb0f2799ef3bb223983ae829346b4f97dd22a040076fcd796b6c96b69b772fc9647ccfb451421195eab4dcec01a0ae5cf1eeb88cbf60a9a58a252997574fa4d3fa15bd5730bcb6b3dcbd030a02b62adf0c5f9b866d768f638248db923b0360cb0ebee0377228f71abe62f9c8b381f7d43be979417a721d041799eaddcaf7f92ffc2b207469251cab19ede5712a340c7c809ae5071851eae8307e464c4c9f04a6be73b0131401cbead4c9772e1bff9a75610e5ef0f22ea700bdac176d1d303bc4fc45f1a80cf38dd8cc2040c0fdec25243ab41e2d5b4371e25c4374926e7ef808821f05ff339ceca62ad91e010389279989f4146fe45ed09b80d32bce8176eeb5b00ef3c7cc5594f59d0dc9e48a4744f6d380ffb7dd8a7f662c1487e78c6941dd35a8d17c29d2c6905a770da057b33ee6e7a03a228ba26b3b9d703548ee6b2a680ee570919d73055421056009ad7f97409b83769aa2be3cbde957d65ea0396d045ad838d993ead88f01649a9c0e868ca9ee0fdd32fe11d1d18fb37bb61537f83680a80aa67c3a7b1bc26025b0286042bc453c3487fabc7d173a4edc3cb978f55cbdcc8d84d85dbaff93970e623f235b40485ca6ffdea0d56c9b87879fbcbea0f1e3e3d70d6d804d4de7e09bfa292d63b68139abe327863c86f559c3933ddc3651fd6fe5552e1654b1bca74f0dd11734a38f4de120a13f5a28fa4a16bc886c47f2a1c47572ec37de795a9aa8c943ee5162219171c3f78603e3ffeec37c20fbbd1394eda40b7e9d8a6b863f1ba8bfe778bb98527aa6e65f8d192f1b50b6d9890ae25c1ffc8e0fa432fe93d4cc7cd80d2715722a8e65f811f20176bc92e5cb1845824fc21c65d654e2d5f7d2810bcaefd14b26fb183f48606343fc981b35133d50f125bdc32f7510a7bb866b9f7d57c393ea253834ca0726e00640ebf77cffcd343dd203946443b16f59d43e59dff2e35701bc5852fafa68c03d486e2a4a65a0ef69fe29931828d5ba94ce954f3b21b493db"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:56 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x10}})
close(r2)
close(r1)

00:02:56 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'veth1_to_bond\x00'})

00:02:56 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:56 executing program 5:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:56 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'veth1_to_bond\x00'})

00:02:56 executing program 5:
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

00:02:56 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:56 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'veth1_to_bond\x00'})

00:02:56 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:56 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:56 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @rand_addr}, 'veth1_to_bond\x00'})

00:02:57 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:57 executing program 4:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x0, 0x0, 0x2}, 0x208b36dae9cf910d)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0)

00:02:57 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:57 executing program 4:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x0, 0x0, 0x2}, 0x208b36dae9cf910d)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0)

00:02:57 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:57 executing program 4:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x0, 0x0, 0x2}, 0x208b36dae9cf910d)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0)

00:02:57 executing program 4:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x0, 0x0, 0x2}, 0x208b36dae9cf910d)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0)

00:02:57 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1)

00:02:58 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:58 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:58 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1)

00:02:58 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000001e000000080000001e5bcab3407efe183e996a5aebdf36d0000000000000001c3a00"], 0x28)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000140), 0x7fdf)

00:02:58 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:58 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1)

00:02:58 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

00:02:58 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1)

00:02:58 executing program 4:
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000880)={[{@logbufs={'logbufs', 0x3d, 0x7a}}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

[  596.379484] XFS (loop4): invalid logbufs value: 82 [not 2-8]
00:02:59 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"})
semget$private(0x0, 0x0, 0x200)
r2 = semget(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev}, &(0x7f0000001840)=0xc)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000680)=""/4096)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0x8)
semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000001680)=""/161)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
listen(r0, 0x6)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
recvfrom$inet(r1, &(0x7f0000000200)=""/129, 0x81, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xffffff19)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x1f3, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

[  596.499699] XFS (loop4): invalid logbufs value: 82 [not 2-8]
00:02:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000002c0)={0x94})

00:02:59 executing program 4:
io_setup(0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', <r2=>0x0})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58)
clock_gettime(0x0, &(0x7f0000002900)={0x0, <r3=>0x0})
syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0xee)
recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000000000000000000000040000000000027bf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffffffffffff"], 0x78)

00:02:59 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x100009, 0xbb, &(0x7f0000000300)=""/187}, 0x48)

00:02:59 executing program 1:
perf_event_open(&(0x7f0000ff3f88)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:02:59 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:02:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]})
ioctl$KVM_SMI(r3, 0xaeb7)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="b800008ed00f07260f01cbbaf80c66b81171af8966efbafc0cb028ee0fc71abaf80c66b83bb7528566efbafc0cb004eef30f5f140f080f009100000e", 0x3c}], 0x1, 0x0, &(0x7f0000000480), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:02:59 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x100009, 0xbb, &(0x7f0000000300)=""/187}, 0x48)

00:02:59 executing program 1:
perf_event_open(&(0x7f0000ff3f88)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:02:59 executing program 4:
io_setup(0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', <r2=>0x0})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58)
clock_gettime(0x0, &(0x7f0000002900)={0x0, <r3=>0x0})
syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0xee)
recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000000000000000000000040000000000027bf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffffffffffff"], 0x78)

00:02:59 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x100009, 0xbb, &(0x7f0000000300)=""/187}, 0x48)

00:02:59 executing program 1:
perf_event_open(&(0x7f0000ff3f88)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:03:00 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xc1, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180))
tkill(r2, 0x1000000000013)

00:03:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]})
ioctl$KVM_SMI(r3, 0xaeb7)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="b800008ed00f07260f01cbbaf80c66b81171af8966efbafc0cb028ee0fc71abaf80c66b83bb7528566efbafc0cb004eef30f5f140f080f009100000e", 0x3c}], 0x1, 0x0, &(0x7f0000000480), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:03:00 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x100009, 0xbb, &(0x7f0000000300)=""/187}, 0x48)

00:03:00 executing program 1:
perf_event_open(&(0x7f0000ff3f88)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:03:00 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[])
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000800)={0x0, {{0xa, 0x4e24, 0x0, @loopback}}}, 0x108)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}}, &(0x7f00000003c0)=0xe8)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [{0x2, 0x5, r0}, {}], {}, [], {}, {0x20, 0x3}}, 0x34, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [], {0x4, 0x7}, [{}], {0x10, 0x1}}, 0x2c, 0x1)

00:03:00 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:00 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="5500000018007f7000fe01b2a4a280930a60020000a84302910000003900090023000c00020000000d000500fe8042000000c78b80082314e9030b9d566885b16732009b11fcb1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f00000002c0)}, 0x0)

[  597.825569] overlayfs: failed to resolve './file1': -2
00:03:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]})
ioctl$KVM_SMI(r3, 0xaeb7)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="b800008ed00f07260f01cbbaf80c66b81171af8966efbafc0cb028ee0fc71abaf80c66b83bb7528566efbafc0cb004eef30f5f140f080f009100000e", 0x3c}], 0x1, 0x0, &(0x7f0000000480), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  597.909580] overlayfs: failed to resolve './file1': -2
[  597.920275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  597.926912] IPv6: NLM_F_CREATE should be set when creating new route
[  597.933525] IPv6: NLM_F_CREATE should be set when creating new route
00:03:00 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98))

00:03:00 executing program 4:
io_setup(0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', <r2=>0x0})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58)
clock_gettime(0x0, &(0x7f0000002900)={0x0, <r3=>0x0})
syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0xee)
recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000000000000000000000040000000000027bf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffffffffffff"], 0x78)

00:03:00 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="5500000018007f7000fe01b2a4a280930a60020000a84302910000003900090023000c00020000000d000500fe8042000000c78b80082314e9030b9d566885b16732009b11fcb1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f00000002c0)}, 0x0)

00:03:00 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98))

00:03:01 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xc1, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180))
tkill(r2, 0x1000000000013)

00:03:01 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]})
ioctl$KVM_SMI(r3, 0xaeb7)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000400)="b800008ed00f07260f01cbbaf80c66b81171af8966efbafc0cb028ee0fc71abaf80c66b83bb7528566efbafc0cb004eef30f5f140f080f009100000e", 0x3c}], 0x1, 0x0, &(0x7f0000000480), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

00:03:01 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98))

[  598.329401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
00:03:01 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="5500000018007f7000fe01b2a4a280930a60020000a84302910000003900090023000c00020000000d000500fe8042000000c78b80082314e9030b9d566885b16732009b11fcb1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f00000002c0)}, 0x0)

00:03:01 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98))

00:03:01 executing program 4:
io_setup(0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', <r2=>0x0})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58)
clock_gettime(0x0, &(0x7f0000002900)={0x0, <r3=>0x0})
syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0xee)
recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000000000000000000000040000000000027bf4ff0a8612ba4000000000000000038000000000000000000000000000000eeff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffffffffffff"], 0x78)

[  598.549023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
00:03:01 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="5500000018007f7000fe01b2a4a280930a60020000a84302910000003900090023000c00020000000d000500fe8042000000c78b80082314e9030b9d566885b16732009b11fcb1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f00000002c0)}, 0x0)

00:03:01 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@md5={0x1, "5a7bbadc7e6fa71353a89dd99aeba7ac"}, 0x11, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

00:03:01 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xbc, &(0x7f0000000100)="008dada50cfcc99e95485cbdb88b", &(0x7f0000000c40)=""/188, 0xffffffff00000f65}, 0x28)

00:03:01 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  598.728903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  598.783738] audit: type=1804 audit(1540339381.423:240): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/706/bus" dev="sda1" ino=17313 res=1
00:03:01 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0))
write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

[  598.937391] audit: type=1804 audit(1540339381.453:241): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/706/bus" dev="sda1" ino=17313 res=1
[  599.004714] audit: type=1804 audit(1540339381.453:242): pid=24700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/706/bus" dev="sda1" ino=17313 res=1
00:03:01 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0))
write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

00:03:01 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xc1, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180))
tkill(r2, 0x1000000000013)

00:03:01 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@md5={0x1, "5a7bbadc7e6fa71353a89dd99aeba7ac"}, 0x11, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

00:03:01 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x5, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

00:03:01 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:01 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xbc, &(0x7f0000000100)="008dada50cfcc99e95485cbdb88b", &(0x7f0000000c40)=""/188, 0xffffffff00000f65}, 0x28)

00:03:02 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@md5={0x1, "5a7bbadc7e6fa71353a89dd99aeba7ac"}, 0x11, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

[  599.300128] audit: type=1804 audit(1540339381.943:243): pid=24723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/707/bus" dev="sda1" ino=16769 res=1
00:03:02 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0))
write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

[  599.435733] audit: type=1804 audit(1540339382.073:244): pid=24735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/708/bus" dev="sda1" ino=16578 res=1
00:03:02 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xbc, &(0x7f0000000100)="008dada50cfcc99e95485cbdb88b", &(0x7f0000000c40)=""/188, 0xffffffff00000f65}, 0x28)

00:03:02 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0))
write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

00:03:02 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@md5={0x1, "5a7bbadc7e6fa71353a89dd99aeba7ac"}, 0x11, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

00:03:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x5, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

[  599.604765] audit: type=1804 audit(1540339382.243:245): pid=24753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir860236644/syzkaller.AiV4lu/709/bus" dev="sda1" ino=16655 res=1
00:03:02 executing program 0:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
setresuid(0x0, 0x0, 0x0)
keyctl$setperm(0x5, r0, 0x1000002192c04)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)
setgroups(0x0, &(0x7f00000001c0))
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0)

00:03:02 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xc1, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f0000000340))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180))
tkill(r2, 0x1000000000013)

00:03:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb)
dup2(0xffffffffffffffff, r0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xf401000000000000, [0x0, 0x3e8]}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x8)

00:03:02 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:02 executing program 0:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
setresuid(0x0, 0x0, 0x0)
keyctl$setperm(0x5, r0, 0x1000002192c04)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)
setgroups(0x0, &(0x7f00000001c0))
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0)

00:03:02 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xbc, &(0x7f0000000100)="008dada50cfcc99e95485cbdb88b", &(0x7f0000000c40)=""/188, 0xffffffff00000f65}, 0x28)

00:03:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x5, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

00:03:02 executing program 0:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
setresuid(0x0, 0x0, 0x0)
keyctl$setperm(0x5, r0, 0x1000002192c04)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)
setgroups(0x0, &(0x7f00000001c0))
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0)

00:03:02 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x5, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

00:03:03 executing program 3:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:03 executing program 0:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
setresuid(0x0, 0xee01, 0x0)
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
setresuid(0x0, 0x0, 0x0)
keyctl$setperm(0x5, r0, 0x1000002192c04)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setregid(0x0, r1)
setgroups(0x0, &(0x7f00000001c0))
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r0)

00:03:03 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000000))

00:03:03 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb)
dup2(0xffffffffffffffff, r0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xf401000000000000, [0x0, 0x3e8]}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x8)

00:03:03 executing program 3:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:03 executing program 5:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:03 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4010ae68, &(0x7f0000000240))

00:03:03 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000000))

00:03:03 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

00:03:03 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000000))

00:03:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb)
dup2(0xffffffffffffffff, r0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xf401000000000000, [0x0, 0x3e8]}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x8)

00:03:03 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4010ae68, &(0x7f0000000240))

00:03:03 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000000))

00:03:04 executing program 5:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:04 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x4000000008912, &(0x7f0000000000)="153f6234488dd25d766070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10)

00:03:04 executing program 3:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:04 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4010ae68, &(0x7f0000000240))

00:03:04 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x4000000008912, &(0x7f0000000000)="153f6234488dd25d766070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10)

00:03:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb)
dup2(0xffffffffffffffff, r0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}}, 0x44801)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty=0xf401000000000000, [0x0, 0x3e8]}, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x8)

00:03:04 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x4000000008912, &(0x7f0000000000)="153f6234488dd25d766070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10)

00:03:04 executing program 5:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:04 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4010ae68, &(0x7f0000000240))

00:03:04 executing program 3:
syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB='0'], &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000")
fcntl$setstatus(r1, 0x4, 0x14400)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000))
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x9})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca517224d794e4a616f6", 0x2e}], 0x1, &(0x7f0000001080)}], 0x1, 0x4010)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100))
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210003010000000051570000000006000000"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
dup2(r0, r3)
write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb)

00:03:04 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x4000000008912, &(0x7f0000000000)="153f6234488dd25d766070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10)

00:03:04 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:04 executing program 4:
socket$unix(0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x3af, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000240))
recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/141, 0x8d}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0)
rt_sigaction(0x0, &(0x7f0000000040)={0xfffffffffffffffd, {0x8}}, &(0x7f0000000080), 0x8, &(0x7f00000000c0))

00:03:05 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6)
setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000040)={0x77359400}, 0x10)
close(r1)
socket$inet6(0xa, 0x1000000000002, 0x0)
dup3(r1, r2, 0x0)

00:03:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:05 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:05 executing program 5:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7})

00:03:05 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0)
getitimer(0x1, &(0x7f0000036fe0))

00:03:05 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6)
setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000040)={0x77359400}, 0x10)
close(r1)
socket$inet6(0xa, 0x1000000000002, 0x0)
dup3(r1, r2, 0x0)

00:03:05 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0)

00:03:05 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x100020, &(0x7f0000000200)={[{@min_batch_time={'min_batch_time'}}]})

00:03:05 executing program 5:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7})

00:03:05 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0)

00:03:05 executing program 4:
socket$unix(0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x3af, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000240))
recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/141, 0x8d}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0)
rt_sigaction(0x0, &(0x7f0000000040)={0xfffffffffffffffd, {0x8}}, &(0x7f0000000080), 0x8, &(0x7f00000000c0))

00:03:05 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={"65716c000000a95b00", @ifru_mtu=0x1})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@local, @dev}, &(0x7f0000000580)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f000000fd00)=[{{&(0x7f000000d680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000fac0), 0x0, &(0x7f000000fb40)=""/102, 0x66}}], 0x1, 0x0, &(0x7f000000ff40)={0x77359400})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ffc0)={0x0, @empty, @rand_addr}, &(0x7f0000010000)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000010040)={@broadcast, @broadcast}, &(0x7f0000010080)=0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000010680)={'ifb0\x00'})

00:03:05 executing program 5:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7})

00:03:05 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0)

00:03:05 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:05 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6)
setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000040)={0x77359400}, 0x10)
close(r1)
socket$inet6(0xa, 0x1000000000002, 0x0)
dup3(r1, r2, 0x0)

00:03:05 executing program 5:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
timerfd_settime(r1, 0x3, &(0x7f0000000040), &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7})

00:03:05 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0)

00:03:05 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:06 executing program 4:
socket$unix(0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x3af, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000240))
recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/141, 0x8d}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0)
rt_sigaction(0x0, &(0x7f0000000040)={0xfffffffffffffffd, {0x8}}, &(0x7f0000000080), 0x8, &(0x7f00000000c0))

00:03:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6)
setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000040)={0x77359400}, 0x10)
close(r1)
socket$inet6(0xa, 0x1000000000002, 0x0)
dup3(r1, r2, 0x0)

00:03:06 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xfffff7fffffffffd, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
listen(r1, 0x0)

00:03:06 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:07 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={"65716c000000a95b00", @ifru_mtu=0x1})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@local, @dev}, &(0x7f0000000580)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f000000fd00)=[{{&(0x7f000000d680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000fac0), 0x0, &(0x7f000000fb40)=""/102, 0x66}}], 0x1, 0x0, &(0x7f000000ff40)={0x77359400})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ffc0)={0x0, @empty, @rand_addr}, &(0x7f0000010000)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000010040)={@broadcast, @broadcast}, &(0x7f0000010080)=0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000010680)={'ifb0\x00'})

00:03:07 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:07 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xfffff7fffffffffd, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
listen(r1, 0x0)

00:03:07 executing program 4:
socket$unix(0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x3af, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000240))
recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)=""/141, 0x8d}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0)
rt_sigaction(0x0, &(0x7f0000000040)={0xfffffffffffffffd, {0x8}}, &(0x7f0000000080), 0x8, &(0x7f00000000c0))

00:03:07 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:07 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000500)={0x2, 0x0, @multicast2}, 0x10)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1)
recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5)
close(r0)

00:03:07 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xfffff7fffffffffd, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
listen(r1, 0x0)

00:03:07 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000240))
getcwd(&(0x7f0000000280)=""/200, 0xfffffffffffffea2)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0x0, 0x8, @remote}, 0xff, [0x0, 0x8]}, 0x5c)

00:03:07 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0xfffff7fffffffffd, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
listen(r1, 0x0)

00:03:07 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000240))
getcwd(&(0x7f0000000280)=""/200, 0xfffffffffffffea2)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0x0, 0x8, @remote}, 0xff, [0x0, 0x8]}, 0x5c)

00:03:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:07 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000240))
getcwd(&(0x7f0000000280)=""/200, 0xfffffffffffffea2)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0x0, 0x8, @remote}, 0xff, [0x0, 0x8]}, 0x5c)

00:03:08 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={"65716c000000a95b00", @ifru_mtu=0x1})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@local, @dev}, &(0x7f0000000580)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f000000fd00)=[{{&(0x7f000000d680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000fac0), 0x0, &(0x7f000000fb40)=""/102, 0x66}}], 0x1, 0x0, &(0x7f000000ff40)={0x77359400})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ffc0)={0x0, @empty, @rand_addr}, &(0x7f0000010000)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000010040)={@broadcast, @broadcast}, &(0x7f0000010080)=0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000010680)={'ifb0\x00'})

00:03:08 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9eb, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8)
fcntl$getown(r0, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0)

00:03:08 executing program 5:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000240))
getcwd(&(0x7f0000000280)=""/200, 0xfffffffffffffea2)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0x0, 0x8, @remote}, 0xff, [0x0, 0x8]}, 0x5c)

00:03:08 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000015c0)=0x10000)
readv(r1, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)

00:03:08 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340), 0x0, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

00:03:08 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0), 0x8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$TCSBRKP(r0, 0x5425, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>0x0, r0, 0x0, 0x9, &(0x7f0000000080)='/dev/md0\x00', 0xffffffffffffffff}, 0x30)
rt_sigqueueinfo(r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5})
ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)})

00:03:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:08 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000015c0)=0x10000)
readv(r1, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)

00:03:08 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340), 0x0, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

00:03:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:09 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000015c0)=0x10000)
readv(r1, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)

00:03:09 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952})
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={"65716c000000a95b00", @ifru_mtu=0x1})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@local, @dev}, &(0x7f0000000580)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f000000fd00)=[{{&(0x7f000000d680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000fac0), 0x0, &(0x7f000000fb40)=""/102, 0x66}}], 0x1, 0x0, &(0x7f000000ff40)={0x77359400})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f000000ffc0)={0x0, @empty, @rand_addr}, &(0x7f0000010000)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000010040)={@broadcast, @broadcast}, &(0x7f0000010080)=0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000010680)={'ifb0\x00'})

00:03:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:09 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340), 0x0, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

00:03:09 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000015c0)=0x10000)
readv(r1, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)

00:03:09 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0), 0x8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$TCSBRKP(r0, 0x5425, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>0x0, r0, 0x0, 0x9, &(0x7f0000000080)='/dev/md0\x00', 0xffffffffffffffff}, 0x30)
rt_sigqueueinfo(r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5})
ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)})

00:03:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:10 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340), 0x0, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

00:03:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

00:03:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:10 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
exit_group(0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000380), 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000640)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14)
recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, &(0x7f00000017c0)=""/70, 0x46}, 0x22)

00:03:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @remote, 0x2}, 0x608, [0x9, 0x0, 0x10001, 0x8, 0x2, 0x7, 0x2, 0x80]}, 0x5c)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000)
r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="002717af5543d05d160604030000000000000000000000000000ffff00000000000002a96e138cb86473000000000001fe800000000088bf"], 0x1)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0xff00000000000000, 0x0, 0x2}, 0xfffc}}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x3, 0x2, 0x1000, 0x0, "7379000000000000001000000000000000000000000000000000001000", 0x3}, 0xfffffffffffffffe, 0x0, 0x200, r4, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['net/tcp6\x00'], 0x9, [], [0x0, 0x48000000000, 0xbfd8, 0xffffffff]})
io_setup(0x0, &(0x7f00000000c0))

00:03:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

00:03:11 executing program 2:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

00:03:11 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0), 0x8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$TCSBRKP(r0, 0x5425, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>0x0, r0, 0x0, 0x9, &(0x7f0000000080)='/dev/md0\x00', 0xffffffffffffffff}, 0x30)
rt_sigqueueinfo(r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5})
ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)})

00:03:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r0, r0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ftruncate(r2, 0x400)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x63, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0xd6}}, 0x0, 0x0, 0x1, 0x3f}, &(0x7f00000000c0)=0x98)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84)
recvmmsg(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0, &(0x7f00000035c0)={0x0, 0x1c9c380})
close(0xffffffffffffffff)

[  608.690642] binder: 25167:25175 Release 1 refcount change on invalid ref 0 ret -22
[  608.709253] binder_alloc: binder_alloc_mmap_handler: 25167 20001000-20004000 already mapped failed -16
00:03:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

[  608.745025] binder: BINDER_SET_CONTEXT_MGR already set
[  608.770800] binder: 25167:25175 ioctl 40046207 0 returned -16
[  608.795592] binder: release 25167:25175 transaction 31 out, still active
[  608.807476] binder: send failed reply for transaction 31, target dead
00:03:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

00:03:11 executing program 2:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

[  609.073867] binder: 25193:25194 Release 1 refcount change on invalid ref 0 ret -22
[  609.129232] binder: release 25193:25194 transaction 35 out, still active
00:03:11 executing program 4:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

00:03:11 executing program 2:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

00:03:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

[  609.278994] binder: send failed reply for transaction 35, target dead
00:03:11 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0), 0x8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$TCSBRKP(r0, 0x5425, 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[], &(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>0x0, r0, 0x0, 0x9, &(0x7f0000000080)='/dev/md0\x00', 0xffffffffffffffff}, 0x30)
rt_sigqueueinfo(r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x5})
ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)})

00:03:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

00:03:12 executing program 4:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

00:03:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r0, r0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ftruncate(r2, 0x400)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x63, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0xd6}}, 0x0, 0x0, 0x1, 0x3f}, &(0x7f00000000c0)=0x98)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84)
recvmmsg(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0, &(0x7f00000035c0)={0x0, 0x1c9c380})
close(0xffffffffffffffff)

00:03:12 executing program 2:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

[  609.435219] binder: 25207:25210 Release 1 refcount change on invalid ref 0 ret -22
[  609.466125] binder: release 25207:25210 transaction 39 out, still active
00:03:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

[  609.559681] binder: send failed reply for transaction 39, target dead
00:03:12 executing program 4:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000300)=ANY=[], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff))
r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0)
mq_notify(r1, &(0x7f00000001c0))
dup3(r0, r1, 0x0)

[  609.700644] binder: 25229:25230 Release 1 refcount change on invalid ref 0 ret -22
[  609.748617] binder: release 25229:25230 transaction 43 out, still active
00:03:12 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

00:03:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

00:03:12 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8))
fcntl$setpipe(r0, 0x407, 0x80000000)

[  609.880072] binder: send failed reply for transaction 43, target dead
00:03:12 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48)

00:03:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

[  610.005289] binder: 25243:25247 Release 1 refcount change on invalid ref 0 ret -22
00:03:12 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8))
fcntl$setpipe(r0, 0x407, 0x80000000)

[  610.059506] binder: release 25243:25247 transaction 47 out, still active
00:03:12 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48)

00:03:12 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

[  610.200486] binder: send failed reply for transaction 47, target dead
[  610.313281] binder: 25267:25268 Release 1 refcount change on invalid ref 0 ret -22
[  610.389509] binder: release 25267:25268 transaction 51 out, still active
[  610.440229] binder: send failed reply for transaction 51, target dead
00:03:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48)

00:03:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r0, r0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ftruncate(r2, 0x400)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x63, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0xd6}}, 0x0, 0x0, 0x1, 0x3f}, &(0x7f00000000c0)=0x98)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84)
recvmmsg(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0, &(0x7f00000035c0)={0x0, 0x1c9c380})
close(0xffffffffffffffff)

00:03:13 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8))
fcntl$setpipe(r0, 0x407, 0x80000000)

00:03:13 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xd08f37cf538eb8ae, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000400)})

00:03:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000240))
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffffd)

00:03:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

00:03:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070")
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x46f, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48)

00:03:13 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8))
fcntl$setpipe(r0, 0x407, 0x80000000)

00:03:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000240))
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffffd)

[  610.647727] binder: 25281:25291 Release 1 refcount change on invalid ref 0 ret -22
[  610.738366] binder: release 25281:25291 transaction 55 out, still active
00:03:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$alg(r0, 0x0, 0x0)
dup2(r1, r0)

00:03:13 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
close(r0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000100)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

00:03:13 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xbe000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  610.829920] binder: send failed reply for transaction 55, target dead
00:03:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r0, r0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4)
ftruncate(r2, 0x400)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x63, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0xd6}}, 0x0, 0x0, 0x1, 0x3f}, &(0x7f00000000c0)=0x98)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84)
recvmmsg(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0, &(0x7f00000035c0)={0x0, 0x1c9c380})
close(0xffffffffffffffff)

00:03:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000240))
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffffd)

00:03:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000600)={0x0, 0x53, &(0x7f0000000580)="3aa4b0e1b7bcbd4cdc7c2936523ca374d9e7a7f3d3db196a1202c53712c2a68b00c7066c6612b3cfc935696b9766d42442ebcd23f3c91b35198e241d578628a6a9f1db93e66e63c58f77fb52cf4d086aaedd22"})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x100000000}, 0x4)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='trusted.overlay.impure\x00')
fremovexattr(r0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080))
write(r1, &(0x7f0000000440)="71166ad50435af44c1d31685ba6106ec63e6a17037cdd281d20c1c32def9c4f8435dc05cd88a1490a49681f7dab0", 0x2e)
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000680)=""/4096)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000300)=0xc)
readahead(0xffffffffffffffff, 0xa644, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x4000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x8})

[  610.992827]  loop0: p1 < > p4
[  611.010442] loop0: p4 start 1854537728 is beyond EOD, truncated
00:03:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000240))
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffffd)

00:03:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$alg(r0, 0x0, 0x0)
dup2(r1, r0)

00:03:13 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xbe000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

00:03:13 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
close(r0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000100)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

00:03:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000061c0)={'bridge_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000012c0)={'bridge_slave_0\x00l', 0x2000000c0ffffff})

00:03:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$alg(r0, 0x0, 0x0)
dup2(r1, r0)

[  611.339299]  loop0: p1 < > p4
[  611.404836] loop0: p4 start 1854537728 is beyond EOD, truncated
00:03:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$alg(r0, 0x0, 0x0)
dup2(r1, r0)

00:03:14 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
fcntl$addseals(r0, 0xa, 0x730000)

00:03:14 executing program 4:
r0 = socket$unix(0x1, 0x1004000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)

00:03:14 executing program 5:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

00:03:14 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
fcntl$addseals(r0, 0xa, 0x730000)

00:03:14 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
fcntl$addseals(r0, 0xa, 0x730000)

00:03:14 executing program 4:
r0 = socket$unix(0x1, 0x1004000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)

[  611.880909] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.890779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  611.905300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
00:03:14 executing program 5:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

[  611.939193] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.946085] bridge0: port 1(bridge_slave_0) entered forwarding state
00:03:14 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xbe000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

00:03:14 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
close(r0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000100)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

[  612.179670]  loop0: p1 < > p4
[  612.191177] loop0: p4 start 1854537728 is beyond EOD, truncated
[  612.417450] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.426311] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.432790] bridge0: port 1(bridge_slave_0) entered forwarding state
00:03:15 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000061c0)={'bridge_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000012c0)={'bridge_slave_0\x00l', 0x2000000c0ffffff})

00:03:15 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
fcntl$addseals(r0, 0xa, 0x730000)

00:03:15 executing program 4:
r0 = socket$unix(0x1, 0x1004000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)

00:03:15 executing program 5:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

00:03:15 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xbe000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

00:03:15 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
close(r0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000100)}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

00:03:15 executing program 1:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

00:03:15 executing program 4:
r0 = socket$unix(0x1, 0x1004000000000002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)

[  612.574080]  loop0: p1 < > p4
00:03:15 executing program 5:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

[  612.652940] loop0: p4 start 1854537728 is beyond EOD, truncated
00:03:15 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x21, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000180)}, 0x78)

00:03:15 executing program 1:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

00:03:15 executing program 5:
r0 = socket$inet_sctp(0x2, 0x205, 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0))
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='EPL\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=xen,', {[{@cache_loose='cache=loose'}], [{@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x7, 0x0, 0xffffffff7fffffff})
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1, 0xdc7e}, 0xfffffffffffffe90)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), 0x8)
exit(0x8009000)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffff00000001)
fchdir(r4)

[  613.173403] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.192458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  613.203122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  613.212310] bridge0: port 1(bridge_slave_0) entered blocking state
00:03:15 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000061c0)={'bridge_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000012c0)={'bridge_slave_0\x00l', 0x2000000c0ffffff})

00:03:15 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x21, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000180)}, 0x78)

00:03:15 executing program 1:
process_vm_writev(0x0, &(0x7f0000c22000), 0xc73d45a8b599314, &(0x7f0000000000), 0x0, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x16)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0)

00:03:15 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:03:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$kcm(0xa, 0x20000000000003, 0x11)
close(r1)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
close(r1)

[  613.218777] bridge0: port 1(bridge_slave_0) entered forwarding state
00:03:15 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:03:16 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x21, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000180)}, 0x78)

00:03:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$kcm(0xa, 0x20000000000003, 0x11)
close(r1)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
close(r1)

00:03:16 executing program 1:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

00:03:16 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:03:16 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x21, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000180)}, 0x78)

00:03:16 executing program 5:
r0 = socket$inet_sctp(0x2, 0x205, 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0))
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='EPL\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=xen,', {[{@cache_loose='cache=loose'}], [{@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x7, 0x0, 0xffffffff7fffffff})
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1, 0xdc7e}, 0xfffffffffffffe90)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), 0x8)
exit(0x8009000)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffff00000001)
fchdir(r4)

[  613.742394] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.751130] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.757516] bridge0: port 1(bridge_slave_0) entered forwarding state
00:03:16 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000061c0)={'bridge_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000012c0)={'bridge_slave_0\x00l', 0x2000000c0ffffff})

00:03:16 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

00:03:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000600)="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", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806)
sendfile(r0, r1, &(0x7f00000000c0), 0x20020102000007)
ftruncate(r1, 0x0)

00:03:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$kcm(0xa, 0x20000000000003, 0x11)
close(r1)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
close(r1)

00:03:16 executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=""/45, 0x2d})
writev(r1, &(0x7f0000000080), 0x1a6)

00:03:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = socket$kcm(0xa, 0x20000000000003, 0x11)
close(r1)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
close(r1)

00:03:16 executing program 5:
r0 = socket$inet_sctp(0x2, 0x205, 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0))
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='EPL\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=xen,', {[{@cache_loose='cache=loose'}], [{@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x7, 0x0, 0xffffffff7fffffff})
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1, 0xdc7e}, 0xfffffffffffffe90)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), 0x8)
exit(0x8009000)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffff00000001)
fchdir(r4)

00:03:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000600)="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", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806)
sendfile(r0, r1, &(0x7f00000000c0), 0x20020102000007)
ftruncate(r1, 0x0)

00:03:16 executing program 1:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

00:03:16 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xf}})

[  614.351590] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.366786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
00:03:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)

[  614.399394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  614.410160] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.416617] bridge0: port 1(bridge_slave_0) entered forwarding state
00:03:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000007c0)={[{@fat=@time_offset={'time_offset'}}, {@fat=@usefree='usefree'}, {@fat=@showexec='showexec'}, {@fat=@check_strict='check=strict'}]})

00:03:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xf}})

00:03:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)

00:03:17 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6)

00:03:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)

00:03:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xf}})

00:03:17 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6)

00:03:17 executing program 5:
r0 = socket$inet_sctp(0x2, 0x205, 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0))
clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
mount$9p_xen(&(0x7f00000002c0)='EPL\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x200000, &(0x7f00000004c0)={'trans=xen,', {[{@cache_loose='cache=loose'}], [{@uid_lt={'uid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000240)={0x7, 0x0, 0xffffffff7fffffff})
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1, 0xdc7e}, 0xfffffffffffffe90)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), 0x8)
exit(0x8009000)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffff00000001)
fchdir(r4)

00:03:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000600)="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", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806)
sendfile(r0, r1, &(0x7f00000000c0), 0x20020102000007)
ftruncate(r1, 0x0)

00:03:17 executing program 1:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

00:03:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0xf}})

00:03:17 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)

00:03:17 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6)

00:03:17 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6)

00:03:17 executing program 2:
r0 = epoll_create(0xe29f)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

00:03:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

00:03:18 executing program 3:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000001480)={0x0, 0xfffffffffffffe7e, &(0x7f00000006c0), 0x8, &(0x7f0000000080), 0x58}, 0x0)

00:03:18 executing program 2:
r0 = epoll_create(0xe29f)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

00:03:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

[  615.419123] nla_parse: 2 callbacks suppressed
[  615.419134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'.
[  615.436577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'.
[  615.519106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'.
00:03:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

00:03:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000600)="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", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806)
sendfile(r0, r1, &(0x7f00000000c0), 0x20020102000007)
ftruncate(r1, 0x0)

[  615.835926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'.
00:03:18 executing program 1:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
exit(0x0)

00:03:18 executing program 3:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000001480)={0x0, 0xfffffffffffffe7e, &(0x7f00000006c0), 0x8, &(0x7f0000000080), 0x58}, 0x0)

00:03:18 executing program 2:
r0 = epoll_create(0xe29f)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

00:03:18 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, 0x0, 0x3, 0x0, "d826624a5da9484792bbc4a4638dab067644565f914c5513cace109440322ba973c21fa8110993eb50585e6340158080918008d4a1d60ad21064a1a08d391bfb5e01ad73eca0d731f7bcb1f2d9fcaa3b"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x4000000100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9)
connect(r0, &(0x7f0000000280)=@un=@abs, 0x80)

00:03:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff0000000280000001100ffffba16a0aa1c2009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

00:03:18 executing program 3:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000001480)={0x0, 0xfffffffffffffe7e, &(0x7f00000006c0), 0x8, &(0x7f0000000080), 0x58}, 0x0)

00:03:18 executing program 2:
r0 = epoll_create(0xe29f)
r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))

[  616.117155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'.
00:03:18 executing program 3:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000001480)={0x0, 0xfffffffffffffe7e, &(0x7f00000006c0), 0x8, &(0x7f0000000080), 0x58}, 0x0)

00:03:18 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)

00:03:18 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0xfffffffffffffd30, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:03:18 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = socket(0x200000000000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4)
io_setup(0x7, &(0x7f00000000c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, &(0x7f0000000100)="1178ae876e654e9d6cfe", 0xa}])

00:03:19 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0x301)

00:03:19 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0x301)

00:03:19 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0xfffffffffffffd30, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x7ffff000)

00:03:19 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)

[  779.518413] INFO: task syz-executor5:25647 blocked for more than 140 seconds.
[  779.525848]       Not tainted 4.19.0+ #300
[  779.530714] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  779.538745] syz-executor5   D23088 25647  20322 0x00000004
[  779.544392] Call Trace:
[  779.547048]  __schedule+0x8cf/0x21d0
[  779.550881]  ? do_raw_spin_trylock+0x270/0x270
[  779.555480]  ? __sched_text_start+0x8/0x8
[  779.559697]  ? mark_held_locks+0xc7/0x130
[  779.563919]  ? print_usage_bug+0xc0/0xc0
[  779.567976]  ? print_usage_bug+0xc0/0xc0
[  779.572136]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  779.576910]  ? lockdep_hardirqs_on+0x296/0x5b0
[  779.581649]  ? retint_kernel+0x2d/0x2d
[  779.585598]  ? trace_hardirqs_on_caller+0xc0/0x310
[  779.590586]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  779.596053]  ? zap_class+0x640/0x640
[  779.599868]  schedule+0xfe/0x460
[  779.603255]  ? __schedule+0x21d0/0x21d0
[  779.607217]  ? find_held_lock+0x36/0x1c0
[  779.611373]  ? mark_held_locks+0xc7/0x130
[  779.615537]  schedule_timeout+0x1cc/0x260
[  779.619747]  ? usleep_range+0x1a0/0x1a0
[  779.623727]  ? wait_for_completion+0x41f/0x8a0
[  779.628362]  ? trace_hardirqs_off_caller+0x310/0x310
[  779.633625]  wait_for_completion+0x427/0x8a0
[  779.638120]  ? wait_for_completion_interruptible+0x840/0x840
[  779.643985]  ? wake_up_q+0x100/0x100
[  779.647781]  ? pcrypt_aead_enc+0x190/0x190
[  779.652132]  ? rcu_read_lock_sched_held+0x14f/0x180
[  779.657309]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  779.662922]  ? pcrypt_aead_encrypt+0x370/0x460
[  779.667609]  tls_push_record+0xf96/0x1480
[  779.671859]  ? check_preemption_disabled+0x48/0x280
[  779.676885]  tls_sw_sendmsg+0xbfd/0x1310
[  779.681004]  ? decrypt_skb_update+0x6a0/0x6a0
[  779.685536]  ? aa_sk_perm+0x218/0x8b0
[  779.689505]  ? rcu_softirq_qs+0x20/0x20
[  779.693501]  ? aa_af_perm+0x5a0/0x5a0
[  779.697322]  inet_sendmsg+0x1a1/0x690
[  779.701200]  ? ipip_gro_receive+0x100/0x100
[  779.705583]  ? apparmor_socket_sendmsg+0x29/0x30
[  779.710434]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  779.716007]  ? security_socket_sendmsg+0x94/0xc0
[  779.720832]  ? ipip_gro_receive+0x100/0x100
[  779.725215]  sock_sendmsg+0xd5/0x120
[  779.729043]  sock_write_iter+0x35e/0x5c0
[  779.733211]  ? sock_sendmsg+0x120/0x120
[  779.737198]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  779.742822]  ? iov_iter_init+0xc2/0x1e0
[  779.746856]  __vfs_write+0x6b8/0x9f0
[  779.750632]  ? kernel_read+0x120/0x120
[  779.754534]  ? apparmor_path_rmdir+0x30/0x30
[  779.758988]  ? trace_hardirqs_off_caller+0x310/0x310
[  779.764102]  ? apparmor_file_permission+0x24/0x30
[  779.769005]  ? rw_verify_area+0x118/0x360
[  779.773163]  vfs_write+0x1fc/0x560
[  779.776690]  ksys_write+0x101/0x260
[  779.780383]  ? __ia32_sys_read+0xb0/0xb0
[  779.784456]  ? trace_hardirqs_off_caller+0x310/0x310
[  779.789643]  __x64_sys_write+0x73/0xb0
[  779.793543]  do_syscall_64+0x1b9/0x820
[  779.797420]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  779.802876]  ? syscall_return_slowpath+0x5e0/0x5e0
[  779.807808]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  779.812840]  ? trace_hardirqs_on_caller+0x310/0x310
[  779.817896]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  779.822970]  ? prepare_exit_to_usermode+0x291/0x3b0
[  779.827992]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  779.832915]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  779.838234] RIP: 0033:0x457569
[  779.841491] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 2a 60 09 <01> 87 01 8b 05 22 60 09 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00
[  779.860469] RSP: 002b:00007fc7191e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  779.868216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
[  779.875487] RDX: 0000000000000009 RSI: 0000000020000140 RDI: 0000000000000003
[  779.882830] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  779.890140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7191e66d4
[  779.897470] R13: 00000000004c5320 R14: 00000000004d8a78 R15: 00000000ffffffff
[  779.904805] INFO: task syz-executor5:25653 blocked for more than 140 seconds.
[  779.912096]       Not tainted 4.19.0+ #300
[  779.916312] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  779.924303] syz-executor5   D25208 25653  20322 0x00000004
[  779.929951] Call Trace:
[  779.932534]  __schedule+0x8cf/0x21d0
[  779.936244]  ? __sched_text_start+0x8/0x8
[  779.940537]  ? mark_held_locks+0xc7/0x130
[  779.944696]  ? zap_class+0x640/0x640
[  779.948462]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  779.953581]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  779.958732]  ? lockdep_hardirqs_on+0x296/0x5b0
[  779.963326]  ? trace_hardirqs_on+0xbd/0x310
[  779.967693]  ? kasan_check_read+0x11/0x20
[  779.971925]  ? prepare_to_wait_exclusive+0x1a6/0x480
[  779.977053]  schedule+0xfe/0x460
[  779.980505]  ? __local_bh_enable_ip+0x160/0x260
[  779.985187]  ? __schedule+0x21d0/0x21d0
[  779.989230]  ? trace_hardirqs_on+0xbd/0x310
[  779.993570]  ? _raw_spin_unlock_bh+0x30/0x40
[  779.997966]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.003118]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  780.008690]  ? check_preemption_disabled+0x48/0x280
[  780.013705]  ? __lock_sock+0x1f6/0x350
[  780.017581]  ? __lock_sock+0x1f6/0x350
[  780.021538]  ? __local_bh_enable_ip+0x160/0x260
[  780.026215]  __lock_sock+0x1fb/0x350
[  780.029987]  ? sk_setup_caps+0x690/0x690
[  780.034054]  ? finish_wait+0x430/0x430
[  780.037942]  lock_sock_nested+0xfe/0x120
[  780.042097]  inet_stream_connect+0x44/0xa0
[  780.046344]  __sys_connect+0x37d/0x4c0
[  780.050298]  ? __ia32_sys_accept+0xb0/0xb0
[  780.054549]  ? kasan_check_read+0x11/0x20
[  780.058751]  ? _copy_to_user+0xc8/0x110
[  780.062735]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  780.068347]  ? put_timespec64+0x10f/0x1b0
[  780.072529]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.077889]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.083189]  __x64_sys_connect+0x73/0xb0
[  780.087279]  do_syscall_64+0x1b9/0x820
[  780.091220]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  780.096604]  ? syscall_return_slowpath+0x5e0/0x5e0
[  780.101721]  ? trace_hardirqs_on_caller+0x310/0x310
[  780.106748]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  780.111880]  ? __bpf_trace_signal_deliver+0x40/0x40
[  780.116913]  ? __switch_to_asm+0x40/0x70
[  780.121028]  ? __switch_to_asm+0x34/0x70
[  780.125099]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  780.130010]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  780.135205] RIP: 0033:0x457569
[  780.138454] Code: 83 c4 18 c3 e8 d8 64 00 00 48 8b 04 24 48 8b 4c 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d 2a 60 09 <01> 87 01 8b 05 22 60 09 01 83 f8 01 0f 85 8a 00 00 00 b8 01 00 00
[  780.157430] RSP: 002b:00007fc7191c4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  780.165313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
[  780.172634] RDX: 0000000000000080 RSI: 0000000020000280 RDI: 0000000000000003
[  780.179962] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000
[  780.187245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7191c56d4
[  780.194603] R13: 00000000004bd9ec R14: 00000000004cc478 R15: 00000000ffffffff
[  780.201924] 
[  780.201924] Showing all locks held in the system:
[  780.208319] 1 lock held by khungtaskd/979:
[  780.212553]  #0: 00000000450728e2 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424
[  780.221300] 1 lock held by rsyslogd/5212:
[  780.225446]  #0: 00000000f4d225a1 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200
[  780.233598] 2 locks held by getty/5303:
[  780.237572]  #0: 000000008c60149b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.245929]  #1: 00000000fd4d0622 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.255030] 2 locks held by getty/5304:
[  780.259057]  #0: 0000000064b661be (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.267331]  #1: 0000000074de351f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.276277] 2 locks held by getty/5305:
[  780.280279]  #0: 0000000071812295 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.288574]  #1: 000000008433f00f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.297466] 2 locks held by getty/5306:
[  780.301523]  #0: 00000000f273c6de (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.309935]  #1: 00000000e4c79691 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.318882] 2 locks held by getty/5307:
[  780.322962]  #0: 00000000c5499193 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.331434]  #1: 00000000311b8544 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.340395] 2 locks held by getty/5308:
[  780.344369]  #0: 0000000090d28272 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.352739]  #1: 00000000b3c33cb2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.361682] 2 locks held by getty/5309:
[  780.365640]  #0: 00000000593ac2ab (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.373984]  #1: 00000000d214390c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.382944] 2 locks held by syz-executor2/15186:
[  780.387684]  #0: 0000000065fec5be (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40
[  780.396157]  #1: 00000000805ad78e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0
[  780.405124] 1 lock held by syz-executor5/25647:
[  780.409861]  #0: 000000003ceed0fd (sk_lock-AF_INET6){+.+.}, at: tls_sw_sendmsg+0x226/0x1310
[  780.418448] 
[  780.420066] =============================================
[  780.420066] 
[  780.427065] NMI backtrace for cpu 1
[  780.430792] CPU: 1 PID: 979 Comm: khungtaskd Not tainted 4.19.0+ #300
[  780.437419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  780.446844] Call Trace:
[  780.449494]  dump_stack+0x244/0x39d
[  780.453116]  ? dump_stack_print_info.cold.1+0x20/0x20
[  780.458353]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  780.464032]  nmi_cpu_backtrace.cold.1+0x5c/0xa1
[  780.468746]  ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f
[  780.473934]  nmi_trigger_cpumask_backtrace+0x1b3/0x1ed
[  780.479286]  arch_trigger_cpumask_backtrace+0x14/0x20
[  780.484475]  watchdog+0xb3e/0x1050
[  780.488007]  ? reset_hung_task_detector+0xd0/0xd0
[  780.492890]  ? __kthread_parkme+0xce/0x1a0
[  780.497114]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  780.502215]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  780.507313]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[  780.511880]  ? trace_hardirqs_on+0xbd/0x310
[  780.516186]  ? kasan_check_read+0x11/0x20
[  780.520317]  ? __kthread_parkme+0xce/0x1a0
[  780.524542]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.529638]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.534728]  ? lockdep_init_map+0x9/0x10
[  780.538782]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  780.543868]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  780.549396]  ? __kthread_parkme+0xfb/0x1a0
[  780.553631]  kthread+0x35a/0x420
[  780.556986]  ? reset_hung_task_detector+0xd0/0xd0
[  780.561815]  ? kthread_stop+0x900/0x900
[  780.565779]  ret_from_fork+0x3a/0x50
[  780.569626] Sending NMI from CPU 1 to CPUs 0:
[  780.574225] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10
[  780.575151] Kernel panic - not syncing: hung_task: blocked tasks
[  780.587918] CPU: 1 PID: 979 Comm: khungtaskd Not tainted 4.19.0+ #300
[  780.594481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  780.603816] Call Trace:
[  780.606392]  dump_stack+0x244/0x39d
[  780.610064]  ? dump_stack_print_info.cold.1+0x20/0x20
[  780.615287]  ? printk_safe_log_store+0x2f0/0x2f0
[  780.620037]  panic+0x238/0x4e7
[  780.623221]  ? add_taint.cold.5+0x16/0x16
[  780.627363]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  780.632893]  ? nmi_trigger_cpumask_backtrace+0x173/0x1ed
[  780.638334]  ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed
[  780.643772]  watchdog+0xb4f/0x1050
[  780.647303]  ? reset_hung_task_detector+0xd0/0xd0
[  780.652144]  ? __kthread_parkme+0xce/0x1a0
[  780.656371]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  780.661464]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  780.666555]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[  780.671133]  ? trace_hardirqs_on+0xbd/0x310
[  780.675444]  ? kasan_check_read+0x11/0x20
[  780.679581]  ? __kthread_parkme+0xce/0x1a0
[  780.683804]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.688897]  ? trace_hardirqs_off_caller+0x310/0x310
[  780.693993]  ? lockdep_init_map+0x9/0x10
[  780.698046]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  780.703144]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  780.708669]  ? __kthread_parkme+0xfb/0x1a0
[  780.712999]  kthread+0x35a/0x420
[  780.716357]  ? reset_hung_task_detector+0xd0/0xd0
[  780.721188]  ? kthread_stop+0x900/0x900
[  780.725151]  ret_from_fork+0x3a/0x50
[  780.729773] Kernel Offset: disabled
[  780.733401] Rebooting in 86400 seconds..