0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
r4 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:11 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1f, 0x10080)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={<r2=>0x0, 0x800}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540)={r2, 0x60000000, 0x10001, 0x55c}, &(0x7f0000000580)=0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x248200, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={<r4=>0x0, 0x5, 0x1}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={<r5=>0x0, 0x9, 0x30}, &(0x7f00000001c0)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10)
r7 = accept$alg(r6, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2a0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={r4, 0x3, 0x2, 0x8b, 0xd35, 0xa, 0x5, 0x3ff, {r5, @in6={{0xa, 0x4e22, 0xbb01, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x1, 0x955, 0x53f2, 0x7, 0x24}}, &(0x7f0000000340)=0xb0)
close(r0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f0000000080)={0x8001, 0x3000})

19:13:11 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
flistxattr(r0, &(0x7f0000000600)=""/236, 0xec)
fchdir(0xffffffffffffffff)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000005c0)={0x8001, 0x0, 0x7fff, 0x405})
unshare(0x8020000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x3, 0x400)
semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x40010)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f00000000c0)={0x0, 0xc, [0xaed0, 0x2, 0x1000]})
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4)
setns(r2, 0x0)
unshare(0x400)

19:13:11 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:11 executing program 5:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x6}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1e3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@empty, @dev, <r3=>0x0}, &(0x7f0000000340)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', r3})
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r4, &(0x7f0000000580), 0x46)

19:13:11 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0xfffffffffffffffd)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
mq_open(&(0x7f0000000000)='net/snmp\x00', 0x1, 0x0, 0x0)
readv(r2, &(0x7f0000000580), 0x46)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x10, 0x0, 0x10, 0x13, 0x3, 0x3, 0x5, 0x101, 0xbffdde3ba9cf1c3f})
syz_open_dev$vcsn(0x0, 0x86, 0x2)
syz_open_dev$sndctrl(0x0, 0x84, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e)

19:13:11 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
r4 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:11 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:11 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0x0, 0x0, "c0308c6c2d1b"}})

19:13:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070")
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0)
syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x0)

19:13:11 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:11 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5, 0x2}, 0xb)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:11 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x3, 0x7, 0xb84, 0x80, 0x81dc, 0x5, 0x2}, 0xb)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioperm(0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2a4, 0x0, 0x0, 0xfffffc72)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119001})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x27c)
pipe(&(0x7f0000000000))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x19e, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0))

[ 3013.972727] audit: type=1400 audit(1560798791.962:1155): avc:  denied  { map } for  pid=15338 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=534 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1
19:13:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b9230a00000f32c4c17de6210f0864660fefc0e7570f01d1f30f1b6d680fb18ea6330000c744240063000000c7442402fc000000c7442406000000000f0114240f35", 0x42}], 0x1, 0x23, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300007d2907cefaa8c90000000000000000ff"], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:12 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)

19:13:12 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100050, 0x0, 0x0, 0x9b}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x801, 0x0)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
socket$packet(0x11, 0x2, 0x300)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

19:13:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03878e55f1f1"], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:12 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')

19:13:12 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x17)
geteuid()
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)

19:13:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071")
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000003540)='net/raw\x00')

19:13:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xf})

19:13:12 executing program 4:
r0 = creat(&(0x7f0000000800)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

19:13:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x400008)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
dup2(r2, r0)

19:13:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x11, 0x0, 0xc0010015], [0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

19:13:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c)
r1 = syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000)

19:13:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
sendfile(r0, r1, 0x0, 0x7ffff000)

19:13:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x100080001, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xa}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0)

19:13:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:12 executing program 4:

19:13:12 executing program 1:
syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

19:13:13 executing program 5:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000580)=0x4)
shmget(0xffffffffffffffff, 0x1000, 0x428, &(0x7f0000ffe000/0x1000)=nil)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000840))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r2 = getpid()
r3 = getpgid(r2)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x2000)
ioctl$TIOCSCTTY(r0, 0x540e, 0x40000100000001)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x8000, 0x400, 0x2, 0x10000, 0x26, r3})
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r1, 0x0)
r5 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)='keyring&-\x00', r5)
r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, r5)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x10000000000000dd, r6)
io_setup(0x0, 0x0)
memfd_create(&(0x7f0000000640)='\x00\x05\xdb\x1f]\x0f\xbe\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\"\xed\x96F\xec\xdcd\xcan6\x15\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89\xbd\x9cv', 0xffffffffffffffff)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000008c0)=0x100, 0x3)
r8 = socket$inet(0x2, 0xfffffffffffffffe, 0xffff)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f00000006c0)="0801f4f6ffffff0000000000000400", 0x10)
request_key(&(0x7f0000000000)='Rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000540)='-\x00', r7)

19:13:13 executing program 4:
syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b4090000303aff8000a867d65100000000ffffe0000002ff020000000000000000000000000001870290780009040060b680fa0000000000000000000000000e03ffffffffffff00000000000000000000ffffac14ffbbf6caed8ce8116f45db4e9d"], 0x0)

19:13:13 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1150, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000140)="e46acdfbef24080200000a9386dd6a00000000072feb3014cdc7dba755c1ff10d5a240501e66ef4635b9e13800810dffad000000e8d5", 0x0}, 0x28)

19:13:13 executing program 2:
syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x0)
r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0)
close(r0)

19:13:13 executing program 1:

19:13:13 executing program 5:

19:13:13 executing program 4:

19:13:13 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:13 executing program 1:

19:13:13 executing program 0:

19:13:13 executing program 4:

19:13:13 executing program 5:

19:13:13 executing program 0:

19:13:13 executing program 1:

19:13:13 executing program 2:

19:13:13 executing program 1:

19:13:13 executing program 1:

19:13:13 executing program 1:

19:13:13 executing program 4:

19:13:13 executing program 2:

19:13:13 executing program 1:

19:13:13 executing program 0:

19:13:13 executing program 5:

19:13:13 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:13 executing program 4:

19:13:13 executing program 0:

19:13:13 executing program 1:

19:13:13 executing program 5:

19:13:13 executing program 2:

19:13:13 executing program 4:

19:13:14 executing program 0:

19:13:14 executing program 5:

19:13:14 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:14 executing program 2:

19:13:14 executing program 1:

19:13:14 executing program 4:

19:13:14 executing program 0:

19:13:14 executing program 2:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:14 executing program 5:

19:13:14 executing program 4:

19:13:14 executing program 1:

19:13:14 executing program 0:

19:13:14 executing program 1:

19:13:14 executing program 1:

19:13:14 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:14 executing program 1:

19:13:14 executing program 5:

19:13:14 executing program 4:

19:13:14 executing program 0:

19:13:14 executing program 2:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:14 executing program 5:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:14 executing program 0:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:14 executing program 4:

19:13:14 executing program 1:

19:13:14 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0xfffffffffffffffd)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, 0x0)
mq_open(0x0, 0x1, 0x0, 0x0)
readv(r2, &(0x7f0000000580), 0x46)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x0, 0x38, 0x0, 0x13, 0x3, 0x3, 0x5, 0x101, 0xbffdde3ba9cf1c3f})
syz_open_dev$vcsn(0x0, 0x86, 0x2)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e)

19:13:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:15 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8000001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000001240)={[{@usrjquota='usrjquota'}]})

19:13:15 executing program 0:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:15 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xffffffffffffff8f)
getpriority(0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200))
fcntl$getown(0xffffffffffffffff, 0x9)
getpgrp(0xffffffffffffffff)
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x2000)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3fa, 0x10000, 0x26})
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x2003, 0xd, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x51000, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r0, 0x0)

19:13:15 executing program 5:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:15 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:15 executing program 0:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:15 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:15 executing program 5:
epoll_create(0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5], [0x0, 0x7, 0x9bc0, 0x0, 0x8a70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x53, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd07, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7053, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb64b, 0x1, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba]}, 0x45c)
close(r0)
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0x10, 0x0, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
readv(r3, &(0x7f0000000580), 0x46)

19:13:15 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:15 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3019.067278] Bluetooth: hci0: command 0x1003 tx timeout
[ 3019.072849] Bluetooth: hci0: sending frame failed (-49)
[ 3021.164712] Bluetooth: hci0: command 0x1001 tx timeout
[ 3021.171937] Bluetooth: hci0: sending frame failed (-49)
[ 3023.262080] Bluetooth: hci0: command 0x1009 tx timeout
19:13:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:25 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(0x0)

19:13:25 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:25 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x20000000001, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc3191637b20000000000007f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60)
dup3(r1, r0, 0x0)

19:13:25 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3029.635043] Bluetooth: hci0: command 0x1003 tx timeout
[ 3029.640486] Bluetooth: hci0: sending frame failed (-49)
[ 3031.732481] Bluetooth: hci0: command 0x1001 tx timeout
[ 3031.737954] Bluetooth: hci0: sending frame failed (-49)
[ 3033.829834] Bluetooth: hci0: command 0x1009 tx timeout
19:13:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:35 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:35 executing program 1:
epoll_create(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')
readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1)
readv(r0, &(0x7f0000000580), 0x46)

19:13:35 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:35 executing program 4:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x20000000001, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xf00, 0x4)

19:13:35 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]})
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff}, 0x0)
symlinkat(0x0, r0, &(0x7f0000000040)='./file0\x00')

19:13:35 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0)
write$P9_RFLUSH(r0, 0x0, 0x0)

19:13:35 executing program 4:

19:13:35 executing program 5:

19:13:35 executing program 1:

19:13:35 executing program 5:

[ 3039.880214] Bluetooth: hci0: command 0x1003 tx timeout
[ 3039.885849] Bluetooth: hci0: sending frame failed (-49)
[ 3041.987561] Bluetooth: hci0: command 0x1001 tx timeout
[ 3041.993018] Bluetooth: hci0: sending frame failed (-49)
[ 3044.074839] Bluetooth: hci0: command 0x1009 tx timeout
19:13:45 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:45 executing program 4:

19:13:45 executing program 0:

19:13:45 executing program 1:

19:13:45 executing program 5:

19:13:45 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:45 executing program 4:

19:13:45 executing program 0:

19:13:45 executing program 5:

19:13:45 executing program 1:

19:13:45 executing program 0:

19:13:45 executing program 4:

[ 3050.205770] Bluetooth: hci0: command 0x1003 tx timeout
[ 3050.211510] Bluetooth: hci0: sending frame failed (-49)
[ 3052.303303] Bluetooth: hci0: command 0x1001 tx timeout
[ 3052.310573] Bluetooth: hci0: sending frame failed (-49)
[ 3054.400500] Bluetooth: hci0: command 0x1009 tx timeout
19:13:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:56 executing program 1:

19:13:56 executing program 4:

19:13:56 executing program 0:

19:13:56 executing program 5:

19:13:56 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 4:

19:13:56 executing program 5:

19:13:56 executing program 0:

19:13:56 executing program 1:

19:13:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:56 executing program 1:

19:13:56 executing program 0:

19:13:56 executing program 1:

19:13:56 executing program 1:

19:13:56 executing program 1:

19:13:56 executing program 5:

19:13:56 executing program 1:

19:13:56 executing program 4:

19:13:56 executing program 0:
open(&(0x7f0000000040)='./file0\x00', 0xc0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, 'A::2:e:'}}, {@nfs_export_on='nfs_export=on'}]})

19:13:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:56 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
lstat(0x0, &(0x7f0000000240))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
syz_open_dev$loop(0x0, 0x0, 0x182)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10020006005, 0x1)
clone(0x6100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='vfat\x00', 0x0, 0x0)

19:13:56 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
preadv(r0, &(0x7f00000017c0), 0x333, 0x1000000)

19:13:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:56 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:58 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:59 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:59 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000001c0)=0x5, 0x4)

19:13:59 executing program 5:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0, 0xfffffffffffffdf5}, 0x20)
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000500))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:13:59 executing program 0:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x50000000000443)

19:13:59 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:13:59 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xff', 0x1ff)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4)
mount$fuse(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x7a04, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x7)
getegid()
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)

19:13:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1)
write(r0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
syz_open_dev$audion(0x0, 0x3, 0x0)
close(r0)
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f)

19:13:59 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:13:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1)
write(r0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
close(r0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f)

19:13:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:59 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e)

19:13:59 executing program 1:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYPTR64], 0x8)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4)
vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
sendto(r2, &(0x7f0000000000)="ae", 0x1, 0x0, 0x0, 0x0)

19:13:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:13:59 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x20000000001, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75b782e4ad88b89d1fc3191637b20000000000007f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a"}, 0x60)

19:13:59 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
link(&(0x7f00000001c0)='./file0\x00', 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000400)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0xfffffffffffffd79)
sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r2 = dup2(r1, r1)
sendmsg$alg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005)
write$P9_RATTACH(r2, 0x0, 0x0)
socket(0x0, 0x800, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000000), 0xffffff45, 0x0, 0x0, 0x0)
semget(0xffffffffffffffff, 0x0, 0x400)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffd})
r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c, 0x80800)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000380)={0x0, 0xfffffffffffffffb}, 0x8)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))

19:13:59 executing program 0:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setfsgid(0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0)
write$P9_RSETATTR(r0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x50000000000443)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000140)={0x14, 0x17, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

19:13:59 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getcwd(0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8090)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:13:59 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:00 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000082e98a0063010400000000009500000000000000ca1a75"], 0x0, 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

19:14:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfb], 0x8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c)
listen(r1, 0xea)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
close(r1)

19:14:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="8478ba2ce5e2cfe87b0071")
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/current\x00')
preadv(r1, &(0x7f00000017c0), 0x333, 0x0)

19:14:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
keyctl$get_keyring_id(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/113, 0x71}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x0)

19:14:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[]], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:00 executing program 1:
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/109}, 0x75, 0x3, 0x2000)

19:14:00 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue\x1b\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x2, 0x1ff})

19:14:00 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xe000bb8)

19:14:00 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:00 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x0)

19:14:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000414900000004fcff", 0x58}], 0x1)

19:14:00 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{}]}})

19:14:00 executing program 5:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:14:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x27c)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0xf93})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:00 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dc86055e0bceec7be070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x2}, 0x21)

19:14:00 executing program 1:
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)

19:14:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:00 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200), 0x1c)

19:14:01 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:01 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]})
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
accept$unix(r0, 0x0, 0x0)

19:14:01 executing program 4:

19:14:01 executing program 0:

19:14:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:01 executing program 4:

19:14:01 executing program 0:

19:14:01 executing program 1:

19:14:01 executing program 5:

19:14:01 executing program 1:

19:14:01 executing program 1:

19:14:01 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:01 executing program 1:

19:14:01 executing program 0:

19:14:01 executing program 4:

19:14:01 executing program 5:

19:14:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:01 executing program 0:

19:14:01 executing program 1:

19:14:01 executing program 4:

19:14:01 executing program 5:

19:14:01 executing program 0:

19:14:01 executing program 1:

19:14:01 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:01 executing program 1:

19:14:01 executing program 4:

19:14:01 executing program 5:

19:14:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:01 executing program 0:

19:14:01 executing program 4:

19:14:01 executing program 5:

19:14:01 executing program 1:

19:14:01 executing program 0:

19:14:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:01 executing program 1:

19:14:02 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:02 executing program 0:

19:14:02 executing program 1:

19:14:02 executing program 4:

19:14:02 executing program 5:

19:14:02 executing program 1:

19:14:02 executing program 0:

[ 3064.647400] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3064.653956] Bluetooth: hci0: Frame reassembly failed (-84)
19:14:02 executing program 4:

19:14:02 executing program 1:

19:14:02 executing program 5:

[ 3066.742916] Bluetooth: hci0: command 0x1003 tx timeout
[ 3066.748349] Bluetooth: hci0: sending frame failed (-49)
[ 3068.840370] Bluetooth: hci0: command 0x1001 tx timeout
[ 3068.846196] Bluetooth: hci0: sending frame failed (-49)
[ 3070.937809] Bluetooth: hci0: command 0x1009 tx timeout
19:14:12 executing program 1:

19:14:12 executing program 0:

19:14:12 executing program 5:

19:14:12 executing program 4:

19:14:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:12 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:12 executing program 4:

19:14:12 executing program 1:

19:14:12 executing program 5:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x400001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x50000000000443)

19:14:12 executing program 0:
openat$null(0xffffffffffffff9c, &(0x7f0000000700)='/dev/null\x00', 0x400001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100))
setfsgid(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000540)=@buf)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x50000000000443)

[ 3075.274803] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3075.281078] Bluetooth: hci0: Frame reassembly failed (-84)
19:14:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0b08007be070")
r1 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

19:14:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f)

19:14:12 executing program 1:
perf_event_open(&(0x7f0000000180)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000001c0)=0x5, 0x4)
bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x40000}}], 0x6fdaec, 0x22, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

19:14:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:13 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:13 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3077.310647] Bluetooth: hci0: command 0x1003 tx timeout
[ 3077.316523] Bluetooth: hci0: sending frame failed (-49)
[ 3079.408089] Bluetooth: hci0: command 0x1001 tx timeout
[ 3079.413515] Bluetooth: hci0: sending frame failed (-49)
[ 3081.505472] Bluetooth: hci0: command 0x1009 tx timeout
19:14:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:22 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:22 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:22 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:22 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:23 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:14:23 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, 0x0, 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3085.610950] Bluetooth: hci0: Frame reassembly failed (-84)
19:14:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:23 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:23 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3087.636590] Bluetooth: hci0: command 0x1003 tx timeout
[ 3087.642040] Bluetooth: hci0: sending frame failed (-49)
[ 3089.733942] Bluetooth: hci0: command 0x1001 tx timeout
[ 3089.739378] Bluetooth: hci0: sending frame failed (-49)
[ 3091.831324] Bluetooth: hci0: command 0x1009 tx timeout
19:14:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:14:33 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:33 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3098.052847] Bluetooth: hci0: command 0x1003 tx timeout
[ 3098.058313] Bluetooth: hci0: sending frame failed (-49)
[ 3100.140265] Bluetooth: hci0: command 0x1001 tx timeout
[ 3100.146170] Bluetooth: hci0: sending frame failed (-49)
[ 3102.237638] Bluetooth: hci0: command 0x1009 tx timeout
19:14:43 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:14:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0), 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)

[ 3108.368489] Bluetooth: hci0: command 0x1003 tx timeout
[ 3108.375369] Bluetooth: hci0: sending frame failed (-49)
[ 3110.466038] Bluetooth: hci0: command 0x1001 tx timeout
[ 3110.471460] Bluetooth: hci0: sending frame failed (-49)
[ 3112.573359] Bluetooth: hci0: command 0x1009 tx timeout
19:14:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:14:53 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:53 executing program 5:

19:14:53 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:14:53 executing program 1:

19:14:53 executing program 0:

19:14:53 executing program 5:

19:14:53 executing program 0:

19:14:53 executing program 1:

19:14:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
fchmod(r0, 0x0)

19:14:53 executing program 0:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0xfffffffffffffc, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@decrefs], 0x0, 0x0, 0x0})

19:14:53 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast2, 0x100000001}, 0x1c, 0x0}}], 0x2, 0x0)

[ 3118.613495] Bluetooth: hci0: command 0x1003 tx timeout
[ 3118.622723] Bluetooth: hci0: sending frame failed (-49)
[ 3120.710883] Bluetooth: hci0: command 0x1001 tx timeout
[ 3120.716426] Bluetooth: hci0: sending frame failed (-49)
[ 3122.808367] Bluetooth: hci0: command 0x1009 tx timeout
19:15:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:03 executing program 5:
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x4)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000000)=0x1)

19:15:03 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:03 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10040, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000001c0)={0xf1f, 0x10001, 0x0, 0x8, 0x8, 0x63})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
read(r1, &(0x7f0000000100)=""/152, 0x98)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000200)={0x100000001, 0x14, [0x7, 0x7, 0x3, 0x101, 0x400]})
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

19:15:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x9, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1)
write$binfmt_aout(r0, &(0x7f0000000500)={{}, "", [[], [], []]}, 0x320)

19:15:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)

19:15:04 executing program 4:
getpid()
sched_setscheduler(0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "0da855dafdd09907", "e268b82c93d49a775028e4517f6acc58", "899dc47e", "e11d8c6c9bee73cf"}, 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:15:04 executing program 1:
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10040, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
read(r0, &(0x7f0000000100)=""/152, 0x98)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000200)={0x100000001, 0x10, [0x7, 0x7, 0x0, 0x400]})

19:15:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0)

19:15:04 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)

19:15:04 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x81, 0x7, 0x4, 0x3, 0x0, 0x0, 0x80, 0x81dc, 0x5, 0x2}, 0xb)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
sendto$inet6(r2, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:15:04 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3129.019826] Bluetooth: hci0: command 0x1003 tx timeout
[ 3129.025426] Bluetooth: hci0: sending frame failed (-49)
[ 3131.117255] Bluetooth: hci0: command 0x1001 tx timeout
[ 3131.122814] Bluetooth: hci0: sending frame failed (-49)
[ 3133.214781] Bluetooth: hci0: command 0x1009 tx timeout
19:15:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:14 executing program 4:

19:15:14 executing program 5:

19:15:14 executing program 0:

19:15:14 executing program 1:

19:15:14 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:14 executing program 1:

19:15:14 executing program 0:

19:15:14 executing program 4:

19:15:14 executing program 5:

19:15:14 executing program 1:

19:15:14 executing program 4:

[ 3139.264854] Bluetooth: hci0: command 0x1003 tx timeout
[ 3139.270323] Bluetooth: hci0: sending frame failed (-49)
[ 3141.362287] Bluetooth: hci0: command 0x1001 tx timeout
[ 3141.367724] Bluetooth: hci0: sending frame failed (-49)
[ 3143.459784] Bluetooth: hci0: command 0x1009 tx timeout
19:15:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:24 executing program 0:

19:15:24 executing program 5:

19:15:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$int_out(r1, 0xa000002286, &(0x7f0000fd3ffc))

19:15:24 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

19:15:24 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:24 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xfffffffffffffce7, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0)

19:15:24 executing program 5:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000016c0)={<r0=>0xffffffffffffff9c})
getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000001700), &(0x7f0000001740)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=@flushpolicy={0x1058, 0x1d, 0x11, 0x70bd29, 0x25dfdbfe, "", [@algo_auth={0x1048, 0x1, {{'crc32-generic\x00'}, 0x8000, "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"}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

19:15:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3e0000000000001)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc860d0f8eceec7be070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xf8a0466)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3)
r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800)
socketpair(0x9, 0xa, 0x81, &(0x7f0000004900)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$rose(r7, 0x104, 0x7, &(0x7f0000004940)=0x209, 0x4)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000540)="b0007d00", 0xa)
ioctl(r4, 0x4000000000009, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00')
r8 = socket$inet6(0xa, 0x2000000802, 0x0)
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000440)=""/212, 0xd4}, &(0x7f0000000340), 0x10}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x8000000000001}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x100021, &(0x7f0000000000), 0xffffffffffffff3e)
unshare(0x40000000)
r9 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x200, 0x3, 0x9, 0x6, 0x8}, 0x14)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, &(0x7f0000000200)=""/46, &(0x7f0000000240)=0x2e)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280))
setsockopt$inet6_int(r9, 0x29, 0xc8, &(0x7f00000007c0)=0x401, 0x1dd)
setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb)

19:15:24 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0)

19:15:24 executing program 0:
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xff', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x7a04, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x7)
getuid()
geteuid()
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00')

19:15:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr\x00', 0x4)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x309000, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0)
link(0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)

[ 3149.671453] Bluetooth: hci0: command 0x1003 tx timeout
[ 3149.676893] Bluetooth: hci0: sending frame failed (-49)
[ 3151.768760] Bluetooth: hci0: command 0x1001 tx timeout
[ 3151.774215] Bluetooth: hci0: sending frame failed (-49)
[ 3153.866076] Bluetooth: hci0: command 0x1009 tx timeout
19:15:34 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x21, 0x0, 0x0)

19:15:34 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:34 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
syz_open_dev$audion(0x0, 0xff, 0x20001)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x20000000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000100)='.dead\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
write$binfmt_misc(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1bb)
syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x3, 0x202)

19:15:34 executing program 0:
mq_notify(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x400, 0x0, @thr={0x0, 0x0}})

19:15:34 executing program 1:
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000380)=0x4)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xff', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x7a04, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x7)
getuid()
getegid()
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
sendfile(r3, r4, &(0x7f0000000100)=0x4, 0xe0)

19:15:34 executing program 2:
r0 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

19:15:34 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

19:15:34 executing program 5:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_LOCK(r0, 0xb)

19:15:34 executing program 1:
io_setup(0xfcc, &(0x7f00000000c0)=<r0=>0x0)
io_submit(r0, 0x225e, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffff4}])

19:15:34 executing program 4:
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpid()
openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x20000000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1cb)
io_setup(0x101, &(0x7f0000000040)=<r1=>0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
io_submit(r1, 0x0, &(0x7f0000001540))
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:15:34 executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpid()
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x20000000, 0x0)
io_setup(0x101, &(0x7f0000000040)=<r1=>0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x1b00, r0, &(0x7f0000000000), 0xfffffce4}])

19:15:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup2(r0, r1)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/77)

19:15:35 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0xffffffffffffffff}]})

19:15:35 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x4)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0x2, 0x200, 0x0, 0x400, 0x0, 0x5, 0xda73})
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
socket$inet6(0xa, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00')
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
ioperm(0x8, 0x3, 0x5)
r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1})
syz_mount_image$hfsplus(0x0, &(0x7f0000000200)='./file0\x00', 0x400, 0x0, &(0x7f0000000280), 0x0, 0x0)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000280))
sendfile(0xffffffffffffffff, r4, 0x0, 0x7fff)

19:15:35 executing program 5:
timer_create(0x0, &(0x7f0000000300)={0x0, 0x8000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1)
ptrace(0x10, r2)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
dup3(r4, r3, 0x0)
write$9p(r1, 0x0, 0x0)

19:15:35 executing program 1:
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
clock_getres(0x0, 0x0)
pkey_mprotect(&(0x7f00001da000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)

19:15:35 executing program 2:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="c1080100bbc1000001010000ac141412e0", 0x11}], 0x1}, 0x0)

19:15:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00, 0x0, 0xf}, 0x0)

19:15:35 executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000300)="800f00001000110019000300e600000000000102000000000100000009000000004000000040000400000000000000006d5ebe5a0000fff053ef", 0x3a, 0x400}], 0x0, 0x0)

19:15:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000debff0)={0x0, 0x7, &(0x7f0000000000)="ec78e3c6972578"})

19:15:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000010c0)="0800b5055e0bcfe87b0071")
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/4096)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14a742000000000000000000000800000900de56b50000000008000000000800080014141b080003000800050f01"], 0x1}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04462019d9476a25"], 0x1}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:15:35 executing program 1:
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/4096)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008020500ac14141b080003000800050f01"], 0x1}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04462019d9476a25"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:35 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800bd055e0bcfe87b0071")
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3})
close(r3)

19:15:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000e40)=@nfc_llcp, 0x80, &(0x7f0000004580)=[{&(0x7f0000000ec0)=""/92, 0x2f5}, {&(0x7f0000000100)=""/168, 0x3d0}, {&(0x7f0000001000)=""/253, 0xffffff35}, {&(0x7f0000001100)=""/231, 0xe7}, {&(0x7f00000012c0)=""/90, 0x5a}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007fc0))

19:15:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)

19:15:35 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="66e50400a05b51191b5e919981009932459e0645ee3779440973ecec702a61135806d133", 0x24, 0x0, 0x0, 0x0)

19:15:35 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

19:15:35 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]})
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$KDENABIO(r0, 0x4b36)

19:15:35 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x7, 0x1100)

19:15:35 executing program 0:

19:15:35 executing program 1:

19:15:35 executing program 2:

19:15:35 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:35 executing program 0:

19:15:35 executing program 1:

19:15:35 executing program 4:

19:15:36 executing program 5:

19:15:36 executing program 2:

19:15:36 executing program 0:

19:15:36 executing program 4:

19:15:36 executing program 1:

19:15:36 executing program 0:

19:15:36 executing program 1:

19:15:36 executing program 1:

19:15:36 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:36 executing program 4:

19:15:36 executing program 1:

19:15:36 executing program 5:

19:15:36 executing program 2:

19:15:36 executing program 0:

19:15:36 executing program 4:

19:15:36 executing program 5:

19:15:36 executing program 0:

19:15:36 executing program 2:

19:15:36 executing program 1:

19:15:36 executing program 4:

19:15:36 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:36 executing program 5:

19:15:36 executing program 2:

19:15:36 executing program 1:

19:15:36 executing program 0:

19:15:36 executing program 4:

19:15:36 executing program 5:

19:15:36 executing program 0:

19:15:36 executing program 2:

19:15:36 executing program 4:

19:15:36 executing program 1:

19:15:36 executing program 1:

19:15:37 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:37 executing program 0:

19:15:37 executing program 5:

19:15:37 executing program 2:

19:15:37 executing program 1:

19:15:37 executing program 4:

19:15:37 executing program 4:

19:15:37 executing program 5:

19:15:37 executing program 2:

19:15:37 executing program 1:

19:15:37 executing program 0:

19:15:37 executing program 5:

19:15:37 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:37 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x0)

19:15:37 executing program 2:

19:15:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0xffaf)

19:15:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x62)

19:15:37 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0xffffffffffbffffb}})

19:15:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x68)

19:15:37 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

19:15:37 executing program 4:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
sendfile(r2, r3, 0x0, 0x50000000000443)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

19:15:37 executing program 5:

19:15:37 executing program 0:

19:15:37 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:38 executing program 0:

19:15:38 executing program 1:

19:15:38 executing program 5:

19:15:38 executing program 4:

19:15:38 executing program 0:

19:15:38 executing program 1:

19:15:38 executing program 2:

19:15:38 executing program 5:

19:15:38 executing program 0:

19:15:38 executing program 1:

19:15:38 executing program 1:

19:15:38 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:38 executing program 1:

19:15:38 executing program 4:

19:15:38 executing program 5:

19:15:38 executing program 2:

19:15:38 executing program 0:

19:15:38 executing program 1:

19:15:38 executing program 2:

19:15:38 executing program 0:

19:15:38 executing program 4:

19:15:38 executing program 5:

19:15:38 executing program 1:

19:15:38 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:38 executing program 0:

19:15:38 executing program 1:

19:15:38 executing program 2:

19:15:38 executing program 4:

19:15:38 executing program 1:

19:15:39 executing program 4:

19:15:39 executing program 0:

19:15:39 executing program 2:

19:15:39 executing program 5:

19:15:39 executing program 2:

19:15:39 executing program 0:

19:15:39 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:39 executing program 1:

19:15:39 executing program 5:

19:15:39 executing program 4:

19:15:39 executing program 2:

19:15:39 executing program 0:

19:15:39 executing program 4:

19:15:39 executing program 1:

19:15:39 executing program 5:

19:15:39 executing program 2:

19:15:39 executing program 0:

19:15:39 executing program 1:

19:15:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, 0x0)
fstat(0xffffffffffffffff, 0x0)
fchown(0xffffffffffffffff, r1, 0x0)
pipe(0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x7)

19:15:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x82000)
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
dup2(r2, r1)

19:15:39 executing program 5:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x800000, 0x0)
pipe2(0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20480, 0x0)
write$selinux_user(0xffffffffffffffff, 0x0, 0x0)
add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000240)={0x51, 0x65ab, 0x2, {}, {0x0, 0x2}, @period={0x5f, 0x9dc, 0xfffffffffffffffb, 0xc283, 0x0, {0x7, 0x2e2a, 0x1e2, 0xfff}, 0x0, 0x0}})
getresgid(&(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000300))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x2102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x0, 0x0)

19:15:39 executing program 4:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x8)
ftruncate(r0, 0x2081fc)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)

19:15:39 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:39 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:39 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:39 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3163.152652] EXT4-fs warning (device sda1): ext4_group_extend:1770: can't shrink FS - resize aborted
19:15:39 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:40 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x5, 0x800}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:41 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x0, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:42 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

19:15:42 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:42 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:43 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 0:
syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)

19:15:44 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, 0x0)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pf\x00', 0x209, 0x0)

19:15:44 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 1:
chdir(&(0x7f0000000140)='./file0\x00')

19:15:44 executing program 0:
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0)

19:15:44 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000280)={0x1c, 0xffffffffffffffff, 0x0, @mcast1}, 0x1c)

19:15:44 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 5:
semop(0x0, &(0x7f0000000140)=[{0x0, 0x1}], 0x1)
ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

19:15:44 executing program 1:
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0)

19:15:44 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:44 executing program 0:
msgget(0x2, 0x41)

19:15:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r1, 0x0)
recvfrom$inet(r1, 0x0, 0x5298f83365f71587, 0x42, 0x0, 0x800e00818)
shutdown(r0, 0x0)

19:15:44 executing program 5:
r0 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x0)

19:15:44 executing program 4:
chroot(&(0x7f0000000000)='./file0\x00')

19:15:44 executing program 1:
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="934c933843bc", @random="99f85cb7d499", [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast, "a89e4c867483d4b806303a167452e7df"}}}}, 0x0)

19:15:44 executing program 0:
fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0)

19:15:44 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)}, {0x0}], 0x2, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0076f)

[ 3168.057816] audit: type=1400 audit(1560798944.783:1156): avc:  denied  { map } for  pid=15577 comm="syz-executor.2" path="socket:[543042]" dev="sockfs" ino=543042 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1
19:15:44 executing program 1:
open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0)
readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

19:15:45 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:45 executing program 0:
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
readlink(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

19:15:45 executing program 4:
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
fchmod(r0, 0xe3)
ftruncate(r0, 0x1000040005)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0)

19:15:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xf03558b9, 0x2, 0x0, 0x800e005d6)
shutdown(r0, 0x0)

19:15:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
pwritev(r0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e0076f)

19:15:45 executing program 4:
syz_extract_tcp_res(&(0x7f0000000000)={<r0=>0x41424344}, 0x9, 0xfffffffffffffffa)
syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, <r1=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xa1, &(0x7f0000000080)={@remote, @local, [{[], {0x8100, 0x7, 0x5, 0x4}}], {@ipv4={0x800, {{0x7, 0x4, 0x2, 0x8001, 0x8f, 0x64, 0x7ff, 0x1f, 0x7e, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x6, 0x5}]}}, @tcp={{0x3, 0x1, r0, r1, 0x100, 0x0, 0x8, 0x0, 0x4, 0x0, 0x457, {[@sack={0x5, 0x6, [0x401]}, @window={0x3, 0x3, 0xffffffffffffffff}]}}, {"67030bcf71fcdb8cf8906179f4be7d7d884cc44d22b727f541d8b3af711a621bd09a13972a5e724d378237e1931893365623972f6e0460949ca482d36c7bc8a8c3d83996c6003a6d51d1c1d3ce3cb37d5a180d"}}}}}}, 0x0)

19:15:45 executing program 0:
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0)

19:15:45 executing program 5:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0)

19:15:45 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:45 executing program 0:
r0 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000), 0x0)

19:15:45 executing program 2:
open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

19:15:45 executing program 1:
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
rmdir(&(0x7f0000000000)='./file0/file0\x00')

19:15:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
semop(0x0, &(0x7f0000000140)=[{0x0, 0x1}], 0x1)
ppoll(&(0x7f0000000000)=[{}, {r1, 0x49}], 0xeb, 0x0, 0x0, 0x0)

19:15:45 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000040)={0x0, {{0x2, 0xffffffffffffffff, @loopback}}}, 0x90)

19:15:45 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:45 executing program 0:
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
fchmod(r0, 0xe3)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x0)

19:15:45 executing program 4:
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
mlockall(0x2)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0x0)

19:15:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000001140)=@in={0x2, 0xffffffffffffffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=[{0x48, 0x29, 0xffffffff, "96cce9fa2d48319380d9024cdbb35394a7983f5a6c0e1d4d053c9bc2b41cf0d98c85b247fdf0173ce3c955405c4905d691e4ca6117b429"}], 0x48}, 0x20000)

19:15:45 executing program 1:
r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

19:15:46 executing program 2:
syz_emit_ethernet(0xe3, 0x0, 0x0)

19:15:46 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f0000000080)=0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, {{0x2, 0x2, @loopback}}, {{0x2, 0x3, @rand_addr=0x666a}}}, 0x118)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007d0)

19:15:46 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg(r0, &(0x7f00000015c0)={&(0x7f0000001140)=@in={0x2, 0xffffffffffffffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=[{0x40, 0x0, 0x0, "96cce9fa2d48319380d9024cdbb35394a7983f5a6c0e1d4d053c9bc2b41cf0d98c85b247fdf0173ce3"}], 0x40}, 0x20000)

19:15:46 executing program 2:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pf\x00', 0x0, 0x0)

19:15:46 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup2(r0, r0)
symlinkat(&(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00')

19:15:46 executing program 1:
open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x188}, {0xffffffffffffffff, 0x20}, {}], 0x4, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)={0x80000000}, 0x8)

19:15:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x7)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000001080), 0x1000)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

19:15:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:46 executing program 1:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
r2 = epoll_create(0x1000000a)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0))
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070")

19:15:46 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x403f, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x2)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x8780, 0x3})

19:15:46 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:46 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000008f00)=[{{&(0x7f0000001200)=@hci, 0x80, 0x0, 0x0, &(0x7f0000001940)=[{0x18, 0x1bd, 0x3, "d6e067"}], 0x18}}], 0x1, 0xc000)

19:15:46 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="e3", 0x1}], 0x1}, 0x4000001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xd57, 0x249cf04cf2b}, 0x300)

19:15:46 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2000000000002, 0x0, 0x0, 0x3}, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
pwrite64(r1, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)

19:15:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000010c0)="0800b5055e0bcfe87b0071")
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/4096)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14a742000000000000000000000800000900de56b50000000008000000000800080014141b080003000800050f01"], 0x1}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04462019d9476a25"], 0x1}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:15:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008010)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="8d", 0x1}], 0x1}, 0x20000080)

19:15:46 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="66e50400a05b51191b5e919908009932459e0645ee3779440973ecec702a61135806", 0x22, 0x0, 0x0, 0x0)

19:15:47 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:47 executing program 1:
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
dup3(r0, r1, 0x0)

19:15:47 executing program 5:
ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000440)={0x0, 0x0, 0xffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101002, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0xfffffffffffffffd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x403f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)

19:15:47 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:47 executing program 0:
accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x228000, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000440)={0x0, 0xf7b, 0xffff, 0x0, 0x5})
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, 0xfffffffffffffffd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x403f, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000480)={0x36, 0x40, 0x100000000, 0x590, 0xf, 0x7, 0x3, 0x1f, 0x6, 0x5})

19:15:47 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
r1 = fanotify_init(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

19:15:47 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0xffffffffffffffaf)
ioctl(r0, 0x8916, &(0x7f0000000000))
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev}, {0x2, 0x0, @multicast2}, 0x100})
ioctl(r0, 0x80000000008936, &(0x7f0000000000))

19:15:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008010)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:47 executing program 5:
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x0)

19:15:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x2fff)

19:15:47 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
dup2(r2, r0)

19:15:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0}, 0x78)

19:15:47 executing program 5:
r0 = accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x403f, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x2)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000080)={0x8780, 0x3})

19:15:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008010)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:47 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000080))

19:15:47 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:47 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x208000, 0x800}, 0x18)

19:15:47 executing program 4:

19:15:47 executing program 5:

19:15:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4008010)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:47 executing program 1:

19:15:47 executing program 0:

19:15:47 executing program 1:

19:15:47 executing program 1:

19:15:47 executing program 4:

19:15:47 executing program 5:

19:15:48 executing program 4:

19:15:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:48 executing program 1:

19:15:48 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:48 executing program 5:

19:15:48 executing program 0:

19:15:48 executing program 0:

19:15:48 executing program 5:

19:15:48 executing program 1:

19:15:48 executing program 4:

19:15:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:48 executing program 0:

19:15:48 executing program 1:

19:15:48 executing program 1:

19:15:48 executing program 1:

19:15:48 executing program 1:

19:15:48 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:48 executing program 4:

19:15:48 executing program 0:

19:15:48 executing program 5:

19:15:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:48 executing program 1:

19:15:48 executing program 4:

19:15:48 executing program 0:

19:15:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:48 executing program 0:

19:15:48 executing program 1:

19:15:48 executing program 5:

19:15:48 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:48 executing program 0:

19:15:48 executing program 4:

19:15:48 executing program 1:

19:15:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:48 executing program 5:

19:15:49 executing program 4:

19:15:49 executing program 1:

19:15:49 executing program 0:
faccessat(0xffffffffffffffff, 0x0, 0x0, 0xd00)

19:15:49 executing program 5:

19:15:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:49 executing program 4:

19:15:49 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:49 executing program 0:

19:15:49 executing program 1:

19:15:49 executing program 4:

19:15:49 executing program 5:

19:15:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:49 executing program 1:

19:15:49 executing program 0:

19:15:49 executing program 4:

19:15:49 executing program 5:

19:15:49 executing program 1:

19:15:49 executing program 0:

19:15:49 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:49 executing program 1:

19:15:49 executing program 5:

19:15:49 executing program 4:

19:15:49 executing program 0:

19:15:49 executing program 5:

19:15:49 executing program 0:

19:15:49 executing program 4:

19:15:49 executing program 1:

19:15:49 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:49 executing program 1:

19:15:50 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x0)

19:15:50 executing program 0:

19:15:50 executing program 1:

19:15:50 executing program 4:

19:15:50 executing program 5:

19:15:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:50 executing program 0:

19:15:50 executing program 1:

19:15:50 executing program 5:

19:15:50 executing program 4:

19:15:50 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:50 executing program 0:

19:15:50 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x0)

19:15:50 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:50 executing program 1:

19:15:50 executing program 4:

19:15:50 executing program 5:

19:15:50 executing program 0:

19:15:50 executing program 5:

19:15:50 executing program 4:

19:15:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
select(0x40, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000100)={0xc5, 0x7, 0xfffffffffffffffc, 0x10001, 0x9, 0x0, 0x9, 0x5}, &(0x7f0000000140)={0x40, 0xff})

19:15:50 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:50 executing program 0:
r0 = getpgid(0x0)
wait4(r0, 0x0, 0x0, 0x0)

19:15:50 executing program 5:
mkdir(&(0x7f0000000100)='./file0/control\x00', 0x0)

19:15:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x0)

19:15:51 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 4:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0)
ftruncate(r0, 0x7e2780e3)
mlockall(0x2)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x12, r1, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0)

19:15:51 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:51 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:51 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:51 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x0)

19:15:51 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:51 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:52 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:52 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x0)

19:15:52 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:52 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:52 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 1:
ioprio_get$uid(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)

19:15:52 executing program 4:
syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={<r1=>0x0, 0x3ff, 0x20, 0x9, 0x6}, &(0x7f0000000100)=0x18)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8)
pipe(&(0x7f0000002180))
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x10000})
ptrace(0x10, r2)
ptrace$cont(0x20, r2, 0x0, 0x0)
ptrace$getsig(0x4202, r2, 0x1, &(0x7f00000020c0))

19:15:52 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:52 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:52 executing program 1:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r0=>0x0}, &(0x7f0000000180)=0xc)
ioprio_get$uid(0x3, r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
write$UHID_INPUT(r1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000280)="aa8a54d4000b07087e6d0a92ead1fd631c49a531166854e12cda57ee2cdb80d17ba263b03104a3787a16f6e506128ad09559556b223d747921d7154ea6d3417b073afd63f5860c7b49202929d3e59cd9dbf3dccc2783", 0x56, 0x0)

19:15:53 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:53 executing program 4:
syz_open_dev$evdev(0x0, 0x0, 0x80400)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
fstat(r0, &(0x7f0000000000))
write$UHID_INPUT(r1, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000000c0)=0x401)

19:15:53 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:53 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:53 executing program 1:
syz_open_dev$evdev(0x0, 0x3, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
fstat(r0, &(0x7f0000000000))
write$UHID_INPUT(r1, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x0, 0x0, @initdev}], 0x4c)
pwrite64(r1, &(0x7f0000000280)="aa8a54d4000b07087e6d0a92ead1fd631c49a531166854e12cda57ee2cdb80d17ba263b03104a3787a16f6e506128ad09559556b223d", 0x36, 0x0)
sched_yield()

19:15:53 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, 0x0, 0x0, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:53 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff})
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x1a})

19:15:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
fstat(0xffffffffffffffff, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0)

19:15:53 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x40010020a, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4)

19:15:53 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0xffffffffffffffaf)
ioctl(r0, 0x8916, &(0x7f0000000000))
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev}, {0x2, 0x0, @multicast2}})
ioctl(r0, 0x80000000008936, &(0x7f0000000000))

19:15:53 executing program 4:
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x9, 0x0, 0x0, 0x2, 0x3, 0x1, 0xffffffff, 0x0, 0x100, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000000, 0x2, 0x0, 0x0, 0xfffffffffffffff7, 0x2, 0x1, 0x0, 0x95, 0x3, 0x0, 0x6, 0x0, 0x0, 0x3, @perf_config_ext={0x2a, 0x4}, 0x0, 0x3f, 0x756, 0xf, 0x7fffffff, 0x0, 0x5b6}, 0x0, 0xffffffffffffffff, r0, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4080, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x40010020a, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4)

19:15:53 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:53 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000640)='\x8e\x1a,\x7f\x00\xabN\xa2\xb2\x1fG\tlv\x85\xa3\x87\x98s\x13h\xa4\xdd\xd5q\xb4rih0Iq\xf9d0\xe1`\xb4{Z\x9f\xb2\xc2\xeco\xda`\xccZJ\xcc\xbd\f\x8eE\xce\xf1]\r\xc0\x91\xe7c\xc4?\xd0\xdc\xed\xc3x%&\r\xeb\xbd\x96C\xce\xb1\x1a\x87\x91\x0e\x1cta\x15\xbb\x1f\x9e\xe5\xb5/z\xe4\x7fc\xef\xf4\x89\x8c+\xed\\\xce6U\xe0\xf9\x8f\x1d\x9f\xad\xf7\xf2b7s\xdb\x8d\xae\xa3\xe9\xbf\x1f\xf5\x98\x1b\x88d\x9ds\b\xcf\x9a\x1b\x86\xc7\x06|$\xe8G8?^\xcel\x88', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1d, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "32199e84ffffffff4116890916105829476914e70bfeb59800f97c97644ab8a7"})

19:15:53 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x9, 0x0, 0x0, 0x2, 0x3, 0x1, 0xffffffff, 0x0, 0x100, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000000, 0x2, 0x0, 0x0, 0xfffffffffffffff7, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x3, @perf_config_ext={0x2a}, 0x0, 0x3f, 0x756, 0x0, 0x7fffffff, 0x0, 0x5b6}, 0x0, 0xffffffffffffffff, r0, 0x8)
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x40010020a, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4)

19:15:53 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:53 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x40010020a, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120)
write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4)

19:15:53 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_getres(0x0, &(0x7f0000000000))

19:15:53 executing program 4:
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2002, 0x10011, r1, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
ftruncate(r2, 0x8c9a)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x8)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

19:15:53 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x400000000000007, &(0x7f0000000040))
perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

19:15:53 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:54 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000a00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup2(r0, r1)

19:15:54 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00')
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x3)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="232120bb792d5d41e025ce00006ba9aec41ae420000000000100ae1f30e850fab32888105a7695af0efc4455f9c199388575197fccdd99f4942d3141cbe35d7cb70682b31bfba9f9debae90248ec3841b0541b9d6f7657e8e0e390ef42e15931a60d53f3d5d80b7f84386f1e6f28a36ee9432ccc98a944f5f19577749946638b5c06f5eda0d456"], 0x87)
close(r1)
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getpeername$packet(r1, 0x0, &(0x7f0000000180))
setns(0xffffffffffffffff, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xffffffffffffffc5)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000280))

19:15:54 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0)

19:15:54 executing program 0:
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
syz_open_dev$audion(0x0, 0x0, 0x0)
getpid()
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
io_setup(0x101, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x1b00, r0, &(0x7f0000000000), 0xfffffce4}])

19:15:54 executing program 1:
r0 = socket$inet(0x10, 0x4000000000000002, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="24000000200007041dfffd946f6105000a0000e81f000002000008000800040004ffffff", 0x24}], 0x1}, 0x0)

19:15:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:54 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\xfd\x81\x00', 0x1}, 0xffffffffffffffaf)
ioctl(r0, 0x8916, &(0x7f0000000000))
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev}, {0x2, 0x0, @multicast2}, 0x100})

19:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x4000000000000002, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="24000000200007041dfffd946f6105000a0000e81f000002000008000800040004ffffff", 0x24}], 0x1}, 0x0)

19:15:54 executing program 0:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x403f, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)

19:15:54 executing program 5:
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, 0x2)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
syz_open_dev$audion(0x0, 0xff, 0x20001)
getpid()
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
write$binfmt_misc(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/524], 0x20c)
syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x3, 0x0)
io_setup(0x101, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x1b00, r1, &(0x7f0000000000), 0xfffffce4}])
keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'security*:,', 0x20, 0x5, 0x20, [0x39]}, 0x39, r2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

19:15:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:54 executing program 1:
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x2)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x20001)
getpid()
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
write$binfmt_misc(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/522], 0x20a)
syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x3, 0x202)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'security*:,', 0x20, 0x5, 0x20, [0x39]}, 0x39, r1)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000040))

19:15:54 executing program 4:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:54 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:54 executing program 0:
r0 = socket$inet(0x10, 0x4000000000000002, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="24000000200007041dfffd946f6105000a0000e81f000002000008000800040004000300", 0x24}], 0x1}, 0x0)

19:15:54 executing program 1:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xfffffffffffffe9a}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:54 executing program 5:
r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0)

19:15:54 executing program 4:

19:15:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:54 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:54 executing program 0:

19:15:54 executing program 4:

19:15:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:54 executing program 4:

19:15:55 executing program 1:

19:15:55 executing program 0:

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 5:

19:15:55 executing program 4:

19:15:55 executing program 0:

19:15:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 5:

19:15:55 executing program 1:

19:15:55 executing program 4:

19:15:55 executing program 0:

19:15:55 executing program 1:

19:15:55 executing program 5:

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 4:

19:15:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e", 0x8)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:55 executing program 5:

19:15:55 executing program 0:

19:15:55 executing program 1:

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 4:

19:15:55 executing program 0:

19:15:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e", 0x8)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:55 executing program 5:

19:15:55 executing program 1:

19:15:55 executing program 4:

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 0:

19:15:55 executing program 5:

19:15:55 executing program 1:

19:15:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e", 0x8)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:55 executing program 4:

19:15:55 executing program 0:

19:15:55 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:55 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec", 0xc)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 1:

19:15:56 executing program 5:

19:15:56 executing program 4:

19:15:56 executing program 1:

19:15:56 executing program 0:

19:15:56 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec", 0xc)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 5:

19:15:56 executing program 4:

19:15:56 executing program 1:

19:15:56 executing program 0:

19:15:56 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 5:

19:15:56 executing program 1:

19:15:56 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec", 0xc)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 4:

19:15:56 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 0:

19:15:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="661d0c0d3ac27aaa7b86c5ec0d1f4d73", 0x10)

19:15:56 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab", 0xe)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc)
syz_open_dev$evdev(0x0, 0x3, 0x80400)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
fstat(r0, &(0x7f0000000000))
write$UHID_INPUT(r1, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_yield()

19:15:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)

19:15:56 executing program 0:
syz_open_dev$evdev(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081)
write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1010)

19:15:56 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00')
sendfile(r1, r3, 0x0, 0x10000000000443)

19:15:56 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab", 0xe)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 5:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:15:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab", 0xe)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:15:57 executing program 5:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c", 0xf)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 3:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000001c0))

19:15:57 executing program 3:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c", 0xf)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 5:
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 3:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:57 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c", 0xf)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)

19:15:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:57 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)

19:15:57 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)

19:15:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:15:58 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0)

19:15:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0)

19:15:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x0, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:58 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x0)

19:15:58 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
keyctl$chown(0x4, r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0x0, 0x0}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:58 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:15:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf00}, 0x0)

19:15:58 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0x0, 0x0}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, 0x0, 0x0, r4)
r5 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r5, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf00}, 0x0)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0x0, 0x0}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
r4 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf00}, 0x0)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:15:59 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
r4 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf00}, 0x0)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340))
r4 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r4, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:15:59 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8800, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:15:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf00}, 0x0)

19:15:59 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:15:59 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0})

19:15:59 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf00}, 0x0)

19:16:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:00 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8800, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8800, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x4)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x3, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:00 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x3, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:00 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x3, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:00 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:00 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x5, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:00 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x5, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:01 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x5, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:01 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x200000, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00')
write$binfmt_misc(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="1c891be737a7b00156045e75d0dc18e0a83000dd4dec35736a1a3399b4492b00585abc597712ebe6c59c2e68fee4f3da396011ad3eae503cdcf4a0b80592ef89bd140cf803c09d6a540f8ea9a676eb153abf3069d4f749425d73f33c780e67b94b6b8a51c480629683f071512355cf7c3f6ec96b10b802db876d1b21483e669263310c88920173789f7f02bd8107000000d4ef7ff994d8818aad"], 0x0)
io_setup(0x101, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
r5 = getuid()
getresgid(&(0x7f0000000380)=<r6=>0x0, &(0x7f00000003c0), &(0x7f0000000540))
write$FUSE_ENTRY(r4, &(0x7f0000000580)={0x90, 0x0, 0x4, {0x3, 0x1, 0x2, 0x401, 0xffff, 0x1f, {0x2, 0x3, 0x4, 0x81, 0x7, 0x8, 0xffffffff, 0x6, 0x3ff, 0xff, 0x6, r5, r6, 0x8b6, 0x140}}}, 0x90)
io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}])
r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=""/17, &(0x7f0000000080)=""/197, &(0x7f0000000280)=""/253})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:01 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:01 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0xffffffffffffff8a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8)
mount$9p_virtio(&(0x7f0000000000)='/dev/ppp\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f0000000280)={'trans=virtio,', {[{@mmap='mmap'}, {@version_9p2000='version=9p2000'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag', 0x3d, '(securityselinux#\x00'}}, {@access_any='access=any'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}})
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:02 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0xffffffffffffff8a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8)
mount$9p_virtio(&(0x7f0000000000)='/dev/ppp\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f0000000280)={'trans=virtio,', {[{@mmap='mmap'}, {@version_9p2000='version=9p2000'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag', 0x3d, '(securityselinux#\x00'}}, {@access_any='access=any'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}})
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:02 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
pipe(&(0x7f0000000000))
dup(r0)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x401, 0x800)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0xfffffe56)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:02 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0xffffffffffffff8a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8)
mount$9p_virtio(&(0x7f0000000000)='/dev/ppp\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x100000, &(0x7f0000000280)={'trans=virtio,', {[{@mmap='mmap'}, {@version_9p2000='version=9p2000'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag', 0x3d, '(securityselinux#\x00'}}, {@access_any='access=any'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}})
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

19:16:02 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:02 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:02 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 0 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:03 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 5 (fault-call:4 fault-nth:0):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:16:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})

19:16:03 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 1 (fault-call:24 fault-nth:0):
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:03 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)

19:16:03 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:16:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400, 0x0)
getsockname$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x10)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x1)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x2, 0x5, 0xea68, 0x80000000}, {0x72, 0x800, 0x5, 0x1}, {0x81, 0x7, 0xb95}]})

19:16:04 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:04 executing program 3 (fault-call:3 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x80000000000001)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

19:16:04 executing program 4 (fault-call:5 fault-nth:0):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

19:16:04 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffc98, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x1c}, 0x1, 0xf00}, 0x0)

19:16:04 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
write$tun(r2, &(0x7f0000000500)={@void, @void, @ipv6={0x0, 0x6, 'o5m', 0x390, 0x32, 0x100000000, @loopback, @dev={0xfe, 0x80, [], 0x1b}, {[@fragment={0xff, 0x0, 0x4, 0x7, 0x0, 0xf0f, 0x64}, @srh={0x1, 0x6, 0x4, 0x3, 0x7b, 0x10, 0x64, [@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @loopback}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x443de1ab, 0x68, 0x101, [@ipv4={[], [], @remote}, @mcast1, @mcast2, @dev={0xfe, 0x80, [], 0x15}, @local, @empty]}, @fragment={0xff, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x200, 0x64}, @routing={0x1d, 0x6, 0x2, 0x0, 0x0, [@mcast2, @empty, @remote]}, @srh={0x62, 0x6, 0x4, 0x3, 0x5, 0x30, 0x7, [@loopback, @empty, @rand_addr="e807ea43baebed6f5bc5efa5623e0304"]}, @fragment={0x0, 0x0, 0x1, 0x2, 0x0, 0xe7c7, 0x67}], @gre={{0x0, 0x0, 0x1, 0x2, 0x0, 0x40, 0x0, 0x1, 0x880b, 0x61, 0x1, [0x1], "4e15049a736fb698b9ef493fce350ebbb94dc1e40ab1c835d250656299dc4c8f626246f9c137635e987c50e756e3dced66810c81242082d20b876ecba9e98b686f793228642d36cae9dae0b360a32228701cc52bde286b5c987491c9eb2d502988"}, {0x8, 0x0, 0x34, 0x100000001, 0x0, 0x0, 0x800, [0x2, 0x7fff], "40bfaac5a94fbd9c4a241aa5c38fe5ca905ca3ebd68cabfdeebd83a3f23f411a9ee7b11abc32454dee81a47e19b48f12134c1d582d240eabfd13ab8e269be8a98e0b12c745ec66843afff2672c306336bd51b16c43c0418f95494f4c6a515fd8f46497655adff9836bc3fdd247a4e96ac69a51e0feac628e443eb4829c4088"}, {0xc18, 0x0, 0x0, 0x18000000000, 0x0, 0x0, 0x86dd, [0xfffffffffffffffd], "169b881939c54a524be6d03fd54be73efc68cd54cd3bd2ce4a7ea78acbfbd8fbf492a0ea83ccbabb2a3c4457eb4e0896035ad95cb9b193eaeab66a2fdb86488aebfd4379c344d2043b24648db021550b6550ff5b4a986694637c6ce136de51110f5cd8140f0288990cf0c5afecfd4510b0c1f2a0e7a8219af7a0576fe4d021f0ef80556fab1841500610401d651f5e1f896345031499de0913dc96e36dc502e9e6063ac160fa85c141447a8ab04518e19f90e9d971a2a0c92603c46cd945275babe628523fad9e4bcca77c5fb9702f202fcf02d3550fd596a34cef3fad090faea0705f9ce2352e988fcccb716df084d6c76797d5"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x5, 0x8, 0x10001, 0x4, 0x8000, 0xfffffffffffffffc}, 0x1, 0x4}}, {0x8, 0x22eb, 0x4, {{0x80000001, 0x2, 0x7, 0xa82, 0xffff, 0x800, 0x3, 0x6}, 0x2, 0x5, 0x1bc80ad7, 0x7, 0x10001, 0xfffffffffffffffd, 0x7, 0x4, 0x4, 0xfffffffffffff800}}, {0x8, 0x6558, 0x1, "616b9192ad03671a899849fe57bad95b36230bbb6478772c05484348c97b21d8d7cdffc62f339c5a5eef07dc7c27614b87595ef60393406f616f9804402eb63da3756321e089d1c9"}}}}}, 0x3b8)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3187.695193] FAULT_INJECTION: forcing a failure.
[ 3187.695193] name failslab, interval 1, probability 0, space 0, times 0
[ 3187.747610] CPU: 1 PID: 9459 Comm: syz-executor.3 Not tainted 4.19.52 #24
[ 3187.754617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3187.763994] Call Trace:
[ 3187.766616]  dump_stack+0x172/0x1f0
[ 3187.770288]  should_fail.cold+0xa/0x1b
[ 3187.774297]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 3187.779429]  ? __lock_acquire+0x6eb/0x48f0
[ 3187.783689]  ? __lock_acquire+0x6eb/0x48f0
[ 3187.788032]  ? avc_has_extended_perms+0x10f0/0x10f0
[ 3187.793075]  __should_failslab+0x121/0x190
[ 3187.797332]  should_failslab+0x9/0x14
[ 3187.802622]  kmem_cache_alloc_node+0x56/0x710
[ 3187.807131]  ? mark_held_locks+0x100/0x100
[ 3187.811400]  __alloc_skb+0xd5/0x5f0
[ 3187.815052]  ? skb_scrub_packet+0x490/0x490
[ 3187.819388]  ? __lock_is_held+0xb6/0x140
[ 3187.823566]  ? ldsem_wake+0x40/0x40
[ 3187.827288]  bcsp_recv+0x8c7/0x13a0
[ 3187.831293]  hci_uart_tty_receive+0x225/0x530
[ 3187.835815]  ? hci_uart_write_work+0x710/0x710
[ 3187.840423]  tty_ioctl+0xe91/0x1510
[ 3187.845629]  ? tty_vhangup+0x30/0x30
[ 3187.849388]  ? mark_held_locks+0x100/0x100
[ 3187.854006]  ? proc_cwd_link+0x110/0x1d0
[ 3187.859489]  ? __fget+0x340/0x540
[ 3187.862978]  ? ___might_sleep+0x163/0x280
[ 3187.867897]  ? __might_sleep+0x95/0x190
[ 3187.872071]  ? tty_vhangup+0x30/0x30
[ 3187.876633]  do_vfs_ioctl+0xd5f/0x1380
[ 3187.880540]  ? selinux_file_ioctl+0x46f/0x5e0
[ 3187.885062]  ? selinux_file_ioctl+0x125/0x5e0
[ 3187.889578]  ? ioctl_preallocate+0x210/0x210
[ 3187.894005]  ? selinux_file_mprotect+0x620/0x620
[ 3187.898970]  ? iterate_fd+0x360/0x360
[ 3187.902797]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 3187.908354]  ? fput+0x128/0x1a0
[ 3187.911661]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3187.917306]  ? security_file_ioctl+0x8d/0xc0
[ 3187.921833]  ksys_ioctl+0xab/0xd0
[ 3187.925303]  __x64_sys_ioctl+0x73/0xb0
[ 3187.929641]  do_syscall_64+0xfd/0x620
[ 3187.933472]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3187.938944] RIP: 0033:0x4592c9
19:16:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="9218a185f5c6aa62461122078d756c211232d25dbd92046cbf8923879d8588e6fb5be6fd0cdea0ac70e3add349e8fc122a88cf88b3676fe0e7fe7360ea07f357d2481f7aa09cf7704d9564599f381329c6d25b69240590d8c2f62f4b70ab3d5fa7164687266cef548c4d9d6b58411f0caa219fda84f6c94d1a41bbca0ff427a1b2d4ff9989e6d2a9cc4fcf5327bf3a7dae310be2bb5eea84ebc0b6cb7b9c0852a5e2cc915cc5a020f5b3a4e0394a0bafaa1d9943e41899eaf724c47d6f4932285a7b65badffab8ba288f8191f0a518a672de291a")
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000040)="001afb82da22", 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4)

19:16:04 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
r3 = msgget(0x0, 0x80)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000140)=""/114)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
r5 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
keyctl$chown(0x4, r5, 0x0, r6)
r7 = semget$private(0x0, 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x5c6, {0x4fb8}}, 0x18)
vmsplice(r4, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r7, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
r8 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

[ 3187.942150] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3187.961160] RSP: 002b:00007fcbbff15c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3187.961176] RAX: ffffffffffffffda RBX: 00007fcbbff15c90 RCX: 00000000004592c9
[ 3187.961183] RDX: 00000000200001c0 RSI: 0000000000005412 RDI: 0000000000000003
[ 3187.961190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3187.961198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbbff166d4
[ 3187.961206] R13: 00000000004c3ace R14: 00000000004d7610 R15: 0000000000000004
[ 3188.008933] kasan: CONFIG_KASAN_INLINE enabled
[ 3188.014613] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 3188.056753] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 3188.059442] kobject: 'loop5' (00000000bab073a1): kobject_uevent_env
[ 3188.063049] CPU: 1 PID: 6422 Comm: kworker/u4:4 Not tainted 4.19.52 #24
[ 3188.063055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3188.063073] Workqueue: events_unbound flush_to_ldisc
[ 3188.063091] RIP: 0010:skb_put+0x35/0x1e0
[ 3188.063103] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 ec e1 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
[ 3188.063109] RSP: 0018:ffff88808a43fb28 EFLAGS: 00010202
[ 3188.063120] RAX: dffffc0000000000 RBX: ffff88806fec8a00 RCX: ffffffff84e1e854
[ 3188.063127] RDX: 0000000000000019 RSI: ffffffff85602504 RDI: 0000000000000000
[ 3188.063134] RBP: ffff88808a43fb58 R08: ffff888093b0c6c0 R09: ffffed1015d24733
[ 3188.063141] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000
[ 3188.063147] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
[ 3188.063157] FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 3188.063165] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3188.063172] CR2: 00007f30e2a1c028 CR3: 00000000a115e000 CR4: 00000000001406e0
[ 3188.063183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3188.063190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3188.063193] Call Trace:
[ 3188.063214]  bcsp_recv+0x9ae/0x13a0
[ 3188.071504] kobject: 'loop5' (00000000bab073a1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3188.076398]  hci_uart_tty_receive+0x225/0x530
[ 3188.076414]  ? hci_uart_write_work+0x710/0x710
[ 3188.086340] kobject: 'loop4' (000000009aa82f54): kobject_uevent_env
[ 3188.090859]  tty_ldisc_receive_buf+0x15f/0x1c0
[ 3188.090876]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3188.090890]  tty_port_default_receive_buf+0x7d/0xb0
[ 3188.090902]  flush_to_ldisc+0x222/0x390
[ 3188.090919]  process_one_work+0x989/0x1750
[ 3188.095067] kobject: 'loop4' (000000009aa82f54): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3188.113981]  ? pwq_dec_nr_in_flight+0x320/0x320
[ 3188.113995]  ? lock_acquire+0x16f/0x3f0
[ 3188.114009]  ? kasan_check_write+0x14/0x20
[ 3188.114025]  ? do_raw_spin_lock+0xc8/0x240
[ 3188.138504] Bluetooth: Can't allocate mem for new packet
[ 3188.141471]  worker_thread+0x98/0xe40
[ 3188.141488]  ? trace_hardirqs_on+0x67/0x220
[ 3188.141510]  kthread+0x354/0x420
[ 3188.206441] kobject: 'loop2' (00000000414363ee): kobject_uevent_env
[ 3188.207870]  ? process_one_work+0x1750/0x1750
[ 3188.207887]  ? kthread_cancel_delayed_work_sync+0x20/0x20
19:16:04 executing program 2 (fault-call:6 fault-nth:0):
mount$9p_xen(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x4800, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
close(r0)

19:16:04 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x6, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000080)="001afb82da22", 0x0, 0x0, 0x0, 0x4000000000, 0x0})

19:16:04 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad46b6487f00878e65d8b4ec2cab5c6e", 0x10)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x6000, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{0x2, 0xe39e5d903a5385d1, 0xffffff8d}, 0x0, 0x4010, 0x448e370e0511d35e}}, 0x2fe40}, 0x1, 0xf00}, 0x0)

19:16:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

19:16:04 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, &(0x7f0000000240)=0xffffffffffffff7d)
unshare(0x400)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3})
shutdown(0xffffffffffffffff, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xffffffffffffffff)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x500000000000, 0x6ce4776d, 0xd6cf, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x200800, 0x0)
r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8)
fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100))
keyctl$chown(0x4, r4, 0x0, r5)
r6 = semget$private(0x0, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000180), 0x0, 0x8)
semtimedop(r6, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}, {0x0, 0x5, 0x800}], 0x2, &(0x7f0000000900))
write$P9_RAUTH(r1, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r7 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x6000)

19:16:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r2, 0x0, &(0x7f0000000000)="9a9fcaa1cb2113a44f3e239e69ede05b16891c13f91569d1bf3a0c3622be14815c65da667ae4395395f2e10fc068ca41517de3267338263ee08f04d92fae54f1f22fcd909431b1c1d839e20a888a52ff17860c2b63768baf66c92f4f7a6b3d5606dc98996c2d")

[ 3188.226739] kobject: 'loop2' (00000000414363ee): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3188.228037]  ret_from_fork+0x24/0x30
[ 3188.228052] Modules linked in:
[ 3188.309063] kobject: 'loop4' (000000009aa82f54): kobject_uevent_env
[ 3188.320585] ---[ end trace 11d88a9c11c93b92 ]---
[ 3188.366893] kobject: 'loop4' (000000009aa82f54): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3188.367424] RIP: 0010:skb_put+0x35/0x1e0
[ 3188.383051] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 ec e1 0a fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
[ 3188.397881] kobject: 'loop0' (00000000f0b522fe): kobject_uevent_env
[ 3188.409155] kobject: 'loop0' (00000000f0b522fe): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 3188.414157] RSP: 0018:ffff88808a43fb28 EFLAGS: 00010202
[ 3188.429204] RAX: dffffc0000000000 RBX: ffff88806fec8a00 RCX: ffffffff84e1e854
[ 3188.437858] RDX: 0000000000000019 RSI: ffffffff85602504 RDI: 0000000000000000
[ 3188.439906] kobject: 'loop2' (00000000414363ee): kobject_uevent_env
[ 3188.449384] RBP: ffff88808a43fb58 R08: ffff888093b0c6c0 R09: ffffed1015d24733
[ 3188.455591] kobject: 'loop2' (00000000414363ee): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 3188.480814] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000000
[ 3188.488215] kobject: 'loop5' (00000000bab073a1): kobject_uevent_env
[ 3188.495424] kobject: 'loop5' (00000000bab073a1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 3188.515592] kobject: 'loop4' (000000009aa82f54): kobject_uevent_env
[ 3188.522660] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
[ 3188.530476] kobject: 'loop4' (000000009aa82f54): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 3188.540810] FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 3188.549123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3188.555127] CR2: 0000000000625208 CR3: 00000000a115e000 CR4: 00000000001406e0
[ 3188.562496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3188.569835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3188.577553] Kernel panic - not syncing: Fatal exception
[ 3188.584695] Kernel Offset: disabled
[ 3188.588332] Rebooting in 86400 seconds..